Landesk Management Suite vulnerabilities
6 known vulnerabilities affecting landesk/landesk_management_suite.
Total CVEs
6
CISA KEV
0
Public exploits
2
Exploited in wild
0
Severity breakdown
CRITICAL2HIGH2MEDIUM2
Vulnerabilities
Page 1 of 1
CVE-2007-1674P2CRITICALCVSS 10.0PoCv8.72007-04-18
CVE-2007-1674 [CRITICAL] CVE-2007-1674: Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allo
Stack-based buffer overflow in the Alert Service (aolnsrvr.exe) in LANDesk Management Suite 8.7 allows remote attackers to execute arbitrary code via a crafted packet to port 65535/UDP.
nvd
CVE-2008-6195P3HIGHCVSS 7.8PoC≤ 8.80.1.1v8.72009-02-20
CVE-2008-6195 [HIGH] CVE-2008-6195: Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite
Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643.
nvd
CVE-2008-2468P3CRITICALCVSS 10.0≤ 8.8v8.72008-09-18
CVE-2008-2468 [CRITICAL] CWE-119 CVE-2008-2468: Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, S
Multiple buffer overflows in the QIP Server Service (aka qipsrvr.exe) in LANDesk Management Suite, Security Suite, and Server Manager 8.8 and earlier allow remote attackers to execute arbitrary code via a crafted heal request, related to the StringToMap and StringSize arguments.
nvd
CVE-2014-5362P3HIGHCVSS 7.2≤ 9.62017-09-19
CVE-2014-5362 [HIGH] CWE-20 CVE-2014-5362: The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct r
The admin interface in Landesk Management Suite 9.6 and earlier allows remote attackers to conduct remote file inclusion attacks involving ASPX pages from third-party sites via the d parameter to (1) ldms/sm_actionfrm.asp or (2) remote/frm_coremainfrm.aspx; or the (3) top parameter to remote/frm_splitfrm.aspx.
nvd
CVE-2014-5361P4MEDIUMCVSS 6.8≤ 9.62015-04-21
CVE-2014-5361 [MEDIUM] CWE-352 CVE-2014-5361: Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earli
Multiple cross-site request forgery (CSRF) vulnerabilities in Landesk Management Suite 9.6 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) start, (2) stop, or (3) restart services via a request to remote/serverServices.aspx.
nvd
CVE-2014-5360P4MEDIUMCVSS 4.3≤ 9.62015-02-03
CVE-2014-5360 [MEDIUM] CWE-79 CVE-2014-5360: Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9
Cross-site scripting (XSS) vulnerability in the admin interface in LANDESK Management Suite before 9.6 SP1 allows remote attackers to inject arbitrary web script or HTML via the AMTVersion parameter to remote/serverlist_grouptree.aspx.
nvd