Directory traversal vulnerability in the PXE TFTP Service (PXEMTFTP.exe) in LANDesk Management Suite (LDMS) 8.80.1.1 and earlier allows remote attackers to read arbitrary files via a subdirectory name followed by ".." sequences, a different vulnerability than CVE-2008-1643.

Per http://community.landesk.com/support/docs/DOC-2659

For LDMS 8.7 SP5 download OSD-848987.5.zip which is attached to this document. (NOTE: You must have 8.7 SP5 installed)

For LDMS 8.8 download OSD-848988.0.zip which is attached to this document.

NOTE: These patches include the code for the previous OSD-7374XX patches that addresses bullet point 1 in the Description section as well as code to address bullet point 2. In any case where OSD-7374XX has already been applied to the core, the above patches should be applied to include the new fix.