Xlpd is prone to a denial-of-service vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this issue to crash the affected application, denying service to legitimate users. Given the nature of this issue, the attacker may also be able to run arbitrary code, but this has not been confirmed. Xlpd 3.0 is vulnerable other versions may also be affected.

• http://www.netsarang.com/products/xlp_detail.html
• http://www.securityfocus.com/archive/1/507029
• http://www.securityfocus.com/bid/36610

---

Updated on 2015-03-25