CVEvulnerability
CVE-2008-2468
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-09-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments.
Affected configurations
• landesk landesk management suite (<= 8.8)
• landesk landesk management suite 8.7
• landesk landesk security suite (<= 8.8)
• landesk landesk security suite 8.7
• landesk landesk server manager (<= 8.8)
• landesk landesk server manager 8.7
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://community.landesk.com/support/docs/DOC-3276 Patch
- http://dvlabs.tippingpoint.com/advisory/TPTI-08-06 dvlabs.tippingpoint.com
- http://secunia.com/advisories/31888 secunia.com
- http://securityreason.com/securityalert/4269 securityreason.com
- http://www.kb.cert.org/vuls/id/538011 US Government Resource
- http://www.securityfocus.com/archive/1/496369/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31193 Patch
- http://www.securitytracker.com/id?1020888 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2588 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45154 exchange.xforce.ibmcloud.com
- http://community.landesk.com/support/docs/DOC-3276 Patch
- http://dvlabs.tippingpoint.com/advisory/TPTI-08-06 dvlabs.tippingpoint.com
- http://secunia.com/advisories/31888 secunia.com
- http://securityreason.com/securityalert/4269 securityreason.com
- http://www.kb.cert.org/vuls/id/538011 US Government Resource
- http://www.securityfocus.com/archive/1/496369/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/31193 Patch
- http://www.securitytracker.com/id?1020888 www.securitytracker.com
- http://www.vupen.com/english/advisories/2008/2588 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45154 exchange.xforce.ibmcloud.com