LANDesk_Management_Suite_Alert_Service_Stack_Overflow_Vulnerability_attack

There exists a stack buffer overflow vulnerability in LANDesk Management Suite. The vulnerability is due to a boundary error when processing specially crafted user data received by the Alert Service via port 65535/UDP. A remote unauthenticated attacker can leverage this vulnerability to inject and execute arbitrary code on the target host with System level privileges. In an attack case where code injection is not successful the affected application will terminate abnormally. In a more sophisticated attack, where code injection is successful, the behaviour of the target is entirely dependent on the intended function of the injected code. The code in such a case would execute within the security context of the service process, which is System . ---