NetSarang Xlpd Remote Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
NetSarang Xmanager Enterprise 4 Build 0186
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51821
Cve id: CVE-2012-1009

NetSarang Xlpd is a windows LPD application.

When detecting malicious LPD requests sent to printer programs, Xlpd has a remote denial of service vulnerability in implementation. Attackers can exploit this vulnerability to crash the application and cause denial of service to legitimate users.

<* Source: Prabhu S Angadi

Link: http://secpod.org/advisories/SecPod_Exploit_NetSarang_Xlpd_Printer_Daemon_DoS_Vuln.txt
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

NetSarang
---------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.netsarang.com/