Siemens Automation License Manager ‘almaxcx.dll’绝对路径遍历漏洞

Siemens Automation License Manager ALM 2.0至5.1+SP1+Upd2版本中的图形用户界面中almaxcx.dll ALMListView.ALMListCtrl ActiveX控件中存在绝对路径遍历漏洞。远程攻击者可利用该漏洞借助Save方法重写任意文件。...

Reprise License Manager edit_lf_get_data Directory Traversal

A directory traversal vulnerability exists in the Reprise License Manager. The vulnerability is due to insufficient input validation while processing HTTP requests to the editlfgetdata operation. A remote authenticated attacker can leverage this vulnerability by sending crafted HTTP requests to t...

Reprise License Manager actserver and akey HTTP Parameters Parsing Stack Buffer Overflow

A stack buffer overflow vulnerability exists in the Reprise License Manager. The vulnerability is due to insufficient input validation of the actserver and akey parameters while processing a number of HTTP requests. Successful exploitation would lead to arbitrary code execution under the security...

Borland AccuRev Buffer Overflow Vulnerability

Borland AccuRev is a software configuration management tool. A buffer overflow vulnerability exists in Borland AccuRev's Reprise License Manager service, which can be exploited by remote attackers to execute arbitrary code via the licfile parameter...

Borland AccuRev Buffer Overflow Vulnerability (CNVD-2015-06027)

Borland AccuRev is a software configuration management tool. Multiple stack buffer overflow vulnerabilities exist in the function activatedoit in Borland AccuRev's Reprise License Manager service, which can be exploited by a remote attacker to execute arbitrary code via the akey or actserver...

CVE-2015-6946

Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary code via the 1 akey or 2 actserver parameter to the activatedoit function or 3 licfile parameter to the servicestartupdoit functionality...

Stack overflow

Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary code via the 1 akey or 2 actserver parameter to the activatedoit function or 3 licfile parameter to the servicestartupdoit functionality...

CVE-2015-6946

Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary code via the 1 akey or 2 actserver parameter to the activatedoit function or 3 licfile parameter to the servicestartupdoit functionality...

CVE-2015-6946: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in the Reprise License Manager service in Borland AccuRev allow remote attackers to execute arbitrary code via the 1 akey or 2 actserver parameter to the activatedoit function or 3 licfile parameter to the servicestartupdoit functionality...

(0Day) Borland AccuRev Reprise License Management Server Path Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the rlmswitchprocess functionality of the Reprise License Manager service. The issue...

(0Day) Borland AccuRev Reprise License Server edit_lf_process Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the editlfprocess resource of the AccuRev Reprise License Manager service. The issue...

(0Day) Borland AccuRev Reprise License Server service_setup_doit Command Stack Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the servicestartupdoit functionality of the Reprise License Manager service. The issue...

PT-2015-7420

Name of the Vulnerable Software and Affected Versions Borland AccuRev affected versions not specified Description The issue concerns multiple stack-based buffer overflows in the Reprise License Manager service. These overflows can be triggered by remote attackers through specific parameters,...

polkit denial of service vulnerability

polkit is a license manager developed by software developer David Zeuthen. A denial of service vulnerability exists in polkit. An attacker can exploit this vulnerability to crash the application and cause a denial of service...

Schneider Electric Floating License Manager Vulnerability

OVERVIEW Schneider Electric had become aware of an “unquoted service path” vulnerability in the Schneider Electric Floating License Manager, produced a patchSchneider Electric Security Notification SEVD 2014-015-01v3,...

Solaris <= 2.5.1 License Manager Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/461/info The Solaris License Manager that ships with versions 2.5.1 and 2.6 is vulnerable to multiple symlink attacks. License Manager creates lockfiles owned by root and set mode 666 which it writes to regularily. It...

SAP Business One License Manager 2005 Buffer Overflow

No description provided by source. $Id: sap2005license.rb 11180 2010-11-30 20:19:18Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

SentinelLM UDP Buffer Overflow

No description provided by source. $Id: sentinellm7udp.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

siemens automation license manager <= 500.0.122.1 - Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Siemens Automation License Manager http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&objid=10805384&treeLang=en Versions: = 500.0.122.1 Platforms: Window...

Schneider Electric Floating License Manager权限提升漏洞

BUGTRAQ ID: 65873 CVECAN ID: CVE-2014-0759 Schneider Electric Floating License Manager是许可证管理器。 Schneider Electric Floating License Manager在实现上存在“未引用搜索路径或元素”漏洞，如果服务的可执行路径包含空格，攻击者可利用此漏洞执行恶意程序。 0 Schneider Electric Floating License Manager 1.0.0 - 1.4.0 厂商补丁： Schneider Electric ------------------...