← back
CVE-2007-1674

CVE-2007-1674

60Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 73%
from disclosure to weapon0 days
Published on NVDApr 18
1st PoCApr 13
metasploitApr 13
exploitation probability
73%top 1% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 65535/UDP.
Affected products
n/a · n/a
public PoCs found — 2
exploitdbwww.exploit-db.com/exploits/16457unverifiedexploitdbwww.exploit-db.com/exploits/29853unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://kb.landesk.com/display/4n/kb/article.asp?aid=4142http://osvdb.org/34964http://secunia.com/advisories/24892https://exchange.xforce.ibmcloud.com/vulnerabilities/33657http://www.securityfocus.com/archive/1/465643/100/0/threadedhttp://www.securityfocus.com/bid/23483http://www.securitytracker.com/id?1017912http://www.tippingpoint.com/security/advisories/TSRT-07-04.htmlhttp://www.vupen.com/english/advisories/2007/1391