CVE-2008-5158

Published: Nov 18, 2008Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Client Software WinCom LPD Total 3.0.2.623 and earlier allows remote attackers to bypass authentication and perform administrative actions via vectors involving "simply skipping the auth stage."

Affected (1)

Products: Clientsoftware: Wincome Mpd Total

Clientsoftware

1 product

Wincome Mpd Total

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Clientsoftware Wincome Mpd Total	Up to 3.0.2.623

Related CWEs

CWE-287

Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

References (14)

http://aluigi.org/adv/wincomalpd-adv.txt

Source: cve@mitre.org

http://aluigi.org/poc/wincomalpd.zip

Source: cve@mitre.org

http://secunia.com/advisories/28763

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/4610

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/487507/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/27614

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/0410

Source: cve@mitre.org

http://aluigi.org/adv/wincomalpd-adv.txt