Lucene search

MitreCVE-2011-4134

HistoryJan 19, 2012 - 7:55 p.m.

CVE-2011-4134

2012-01-1919:55:01

CWE-119

mitre

web.nvd.nist.gov

cve-2011-4134

buffer overflow

flexera flexnet publisher

remote code execution

vulnerability

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

High

EPSS

0.034

Percentile

91.6%

JSON

Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allows remote attackers to execute arbitrary code via a crafted 0x2f packet.

Affected configurations

Nvd

Node

flexerasoftwareflexnet_publisherMatch11.10

VendorProductVersionCPE
flexerasoftwareflexnet_publisher11.10cpe:2.3:a:flexerasoftware:flexnet_publisher:11.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
flexerasoftware	flexnet_publisher	11.10	cpe:2.3:a:flexerasoftware:flexnet_publisher:11.10:::::::*

References

kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200980&sliceId=1

www.flexerasoftware.com/pl/12982.htm

www.securityfocus.com/bid/48927

zerodayinitiative.com/advisories/ZDI-11-244/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

8.2

Confidence

High

EPSS

0.034

Percentile

91.6%

JSON

Related for CVE-2011-4134