CVE-2008-5158

Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

1.80% chance of exploitation in the next 30 days, 78th percentile

Published

2008-11-18

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://aluigi.org/poc/wincomalpd.zip

Security advisories

• http://secunia.com/advisories/28763
• http://www.securityfocus.com/bid/27614

References

• CVE Record
• NVD entry