Secunia

Aaron Portnoy has reported a vulnerability in LANDesk Management Suite, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the Alert Service (AOLNSRVR.EXE) when processing data received via port 65535/UDP. This can be exploited to cause a stack-based buffer overflow via a specially crafted packet sent to port 65535/UDP.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in version 8.7. Other versions may also be affected.

Solution
Update to the latest Service Pack and apply hotfix INST-11050687.2. Please see the vendor's advisory for more details.

Provided and/or discovered by
Aaron Portnoy, TippingPoint Security Research Team

Changelog
Further details available in Customer Area

Original Advisory
LANDesk:
http://kb.landesk.com/display/4n/kb/article.asp?aid=4142&p=5

TippingPoint:
http://www.tippingpoint.com/security/advisories/TSRT-07-04.html

Deep Links
Links available in Customer Area