A vulnerability has been reported in multiple LANDesk products, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to a boundary error within the QIP service (qipsrvr.exe), when processing "heal" requests. This can be exploited to cause a stack or a heap-based buffer overflow via a specially crafted packet sent to port 12175/TCP.
Successful exploitation allows execution of arbitrary code.
This vulnerability is reported in LANDesk Management Suite, LANDesk Security Suite, and LANDesk Server Manager version 8.8 and earlier.
Do you have additional information related to this advisory?
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this
information to firstname.lastname@example.org