Luigi Auriemma has discovered some vulnerabilities in Intermate WinIPDS, which can be exploited by malicious people to disclose sensitive information or cause a DoS (Denial of Service).

1) An error in the ipdsserver.exe service can be exploited to cause the service to consume large amounts of CPU resources via a specially crafted packet sent to default port 5001/TCP.

Successful exploitation requires that an "Output Driver" in the IPDS Services configuration is activated.

2) An input validation error in the ipdsserver.exe service when processing HTTP requests on default port 8181/TCP can be exploited to display arbitrary files via directory traversal attacks.

The vulnerabilities are confirmed in version 3.3 (Revision G52-33-021)

Solution
Update to version 3.3 Revision G52-33-022.
Further details available in Customer Area

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/winipds-adv.txt

Intermate:
http://www.intermate.com/media(911,1033)/WinIPDS-G52-33-022.txt

Deep Links
Links available in Customer Area