CVE-2012-0231

CVE-2012-0231 affects GE Intelligent Platforms Proficy Plant Applications: PRLicenseMgr.exe (Proficy Server License Manager) memory corruption via crafted TCP session on port 12401/TCP, enabling remote denial of service or possible arbitrary code execution. ICS-CERT notes multiple memory corrupti...

PT-2012-2422

Name of the Vulnerable Software and Affected Versions GE Intelligent Platforms Proficy Plant Applications versions 5.0 and earlier Description The issue allows remote attackers to cause a denial of service or possibly execute arbitrary code via a crafted TCP session on port 12401. This is due to ...

FlexNet License Multiple Vulnerabilities

The version of FlexNet License Manager installed on the remote Windows host is earlier than 11.10.0.3. As such, it is potentially affected by multiple vulnerabilities : - Multiple problems exist that allow an attacker to influence the saving and loading of log files on the server. By utilizing a...

CVE-2011-4529

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

CVE-2011-4530

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service exception and daemon crash via long fields, as demonstrated by fields to the 1 opensession-workstation-NAME or 2...

Design/Logic Flaw

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

CVE-2011-4532

CVE-2011-4532 concerns Siemens ALM: the ALMListView.ALMListCtrl ActiveX control (almaxcx.dll) in ALM GUI versions 2.0–5.1+SP1+Upd2 allows remote overwrite of arbitrary files via the Save method due to an absolute path traversal. The issue is tied to the ActiveX control used in the Siemens Automat...

CVE-2011-4530

Siemens ALM (Automation License Manager) 4.0–5.1+SP1+Upd1 is affected by a vulnerability in how it handles fields coming from clients over the network. The issue arises from improper handling of field lengths in commands sent to the server (notably open_session->workstation->NAME and grant-...

PT-2012-1908

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager versions 2.0 through 5.1+SP1+Upd2 Description The issue is related to an absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control. This vulnerability allows remote attackers to...

PT-2012-1906

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager ALM versions 4.0 through 5.1+SP1+Upd1 Description The issue allows remote attackers to cause a denial of service, resulting in an exception and daemon crash, by sending long fields to specific functions. This...

CVE-2011-4531: Improper Input Validation

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted content in a 1 gettargetocxparam or 2 sendtargetocxparam command...

CVE-2011-4532: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager ALM 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method...

CVE-2011-4529: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

CVE-2011-4530: Improper Input Validation

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service exception and daemon crash via long fields, as demonstrated by fields to the 1 opensession-workstation-NAME or 2...

PT-2012-1907

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager ALM versions 4.0 through 5.1+SP1+Upd1 Description The issue allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and daemon crash. This can be achieved via crafted...

PT-2012-1905

Name of the Vulnerable Software and Affected Versions Siemens Automation License Manager versions 4.0 through 5.1+SP1+Upd1 Description The issue allows remote attackers to execute arbitrary code due to multiple buffer overflows. This can be achieved by sending a long serialid field in a licenseke...

Vulnerabilities in Siemens Automation License Manager

Luigi Auriemma Application: Siemens Automation License Manager http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&objid=10805384&treeLang=en Versions: = 500.0.122.1 Platforms: Windows Bugs: A Service licensekey serial...

Siemens Automation License Manager multiple security vulnerabilities

Code execution, unauthorized files access, DoS...

siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities

siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities Luigi Auriemma Application: Siemens Automation License Manager http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&objid=10805384&treeLang=en...

siemens automation license manager 500.0.122.1 - Multiple Vulnerabilities

Luigi Auriemma Application: Siemens Automation License Manager http://support.automation.siemens.com/WW/llisapi.dll?func=cslib.csinfo&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&objid=10805384&treeLang=en Versions: = 500.0.122.1 Platforms: Windows Bugs: A Service licensekey serial...