Flexera FlexNet Publisher License Server Buffer Overflow (CVE-2015-8277)

Two buffer overflow vulnerabilities have been discovered in the FlexNet Publisher license server manager. These vulnerabilities are due to improper bounds checking in a custom strncpy function when handling requests received over the network. An attacker could leverage these vulnerabilities by...

IBM RLKS Administration and Reporting Tool Information Disclosure Vulnerability

IBM RLKS Rational License Key Server is a license key server from IBM, USA.Administration and Reporting Tool is one of the license key management and reporting tools. An information disclosure vulnerability exists in IBM RLKS Administration and Reporting Tool version 8.1.4 and versions 8.1.4.2...

Error: "Error Id: XDDS:F05685F3" Connection To Existing License Server Fails After License Server Upgrade to 11.11.1 v2

Connection to existing production license server XenDesktop 7.5 fails after License Server upgrade to 11.11.1. New XenDesktop 7.5 environment. Upgraded existing license server to 11.11.1 build 13017 Current XenApp 6.5 environment continued to function New DDC is fails to connect to the license...

XenMobile Does Not Recognize Licenses Installed on a Remote License Server

XenMobile does not recognize licenses installed on a remote license server. The ZDM.log file shows that cached license has expired and XenMobile temporary license expires after 30 days. Telnet from XenMobile server to licensing server over 7279 fails and netstat on licensing server shows that the...

CVE-2015-7547 - Citrix Security Advisory for glibc Vulnerability

Overview A vulnerability has been recently disclosed in the glibc getaddrinfo function. This issue could potentially allow an attacker to inject code into a process that calls the vulnerable function. The issue has been assigned the following CVE identifier: CVE-2015-7547: The vulnerable function...

Error: "License server is not connected" in Citrix Director

On the Director site, if you scroll down to check the connectivity of the CitrixLicense server to each of thecontrollers, it shows up as "License server is not connected"...

(0Day) Borland AccuRev Reprise License Server edit_lf_get_data Command lf Parameter Path Traversal Read Vulnerability

This vulnerability allows remote attackers to read arbitrary files on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the editlfgetdata functionality of the AccuRev Reprise License Manager service. The issu...

(0Day) Borland AccuRev Reprise License Server activate_doit Command akey Parameter Stack Buffer Overflow Vulnerability

This vulnerability allows remote attackers to cause a stack buffer overflow in the Reprise License Management service on installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the activatedoit function of the service. The...

(0Day) Borland AccuRev Reprise License Server diagnostics_doit Command outputfile Parameter File Overwrite Denial of Service Vulnerability

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the diagonosticdoit command of the AccuRev Reprise License Manager service. The iss...

(0Day) Borland AccuRev Reprise License Server activate_doit Command actserver Parameter Stack Buffer Overflow Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Borland AccuRev. Authentication is not required to exploit this vulnerability. The specific flaw exists within the activatedoit function of the service. The issue lies in the handling of the...

Wavelink Emulation License Server HTTP Header Processing Buffer Overflow (CVE-2015-4059)

A buffer overflow vulnerability exists in Wavelink Emulation License Server. The vulnerability is due to a boundary error when parsing HTTP headers. By sending crafted requests to a vulnerable server, a remote unauthenticated attacker can possibly exploit this vulnerability to execute arbitrary...

GE Healthcare Centricity Image Vault Trust Management Vulnerability

GE Healthcare Centricity Image Vault is a library of Vivid cardiovascular ultrasound images from General Electric GE for the healthcare industry. A security vulnerability exists in GE Healthcare Centricity Image Vault version 3.x, which stems from the use of 'gemnet' as password for the...

CVE-2004-2777

GE Healthcare Centricity Image Vault 3.x is affected by an authentication issue due to default or hard-coded credentials across multiple components (including Image Vault 3.x itself and related GE products such as GEMNet License Server). The ICS-CERT advisory (and GE’s self-assessment) confirms r...

CVE-2004-2777

GE Healthcare Centricity Image Vault 3.x has a password of 1 gemnet for the administrator account, 2 webadmin for the webadmin administrator account of the ASACA DVD library, 3 an empty value for the gemsservice account of the Ultrasound Database, and possibly 4 gemnet2002 for the gemnet2002...

Wavelink Terminal Emulation 'LicenseServer.exe' Remote Code Execution Vulnerability

Wavelink Emulation ConnectPro TermProxy is a product from Wavelink that provides a stable connection environment for Wavelink Terminal Emulation TE, Terminal Emulation. A remote code execution vulnerability exists in Wavelink Terminal Emulation 'LicenseServer.exe', which allows attackers to explo...

CVE-2015-4059

Heap-based buffer overflow in the License Server LicenseServer.exe in Wavelink Terminal Emulation TE allows remote attackers to execute arbitrary code via a large HTTP header...

Heap overflow

Heap-based buffer overflow in the License Server LicenseServer.exe in Wavelink Terminal Emulation TE allows remote attackers to execute arbitrary code via a large HTTP header...

CVE-2015-4059

Heap-based buffer overflow in the License Server LicenseServer.exe in Wavelink Terminal Emulation TE allows remote attackers to execute arbitrary code via a large HTTP header...

(0Day) Wavelink Emulation License Server LicenseServer.exe HTTP Request Headers Remote Code Execution Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Wavelink Emulation License Server. User interaction is not required to exploit this vulnerability. The specific flaw exists in the parsing of HTTP requests in LicenseServer.exe listening by default on por...

HP Service Virtualization AutoPass License Server Directory Traversal (CVE-2013-6221)

A code execution vulnerability exists in HP Service Virtualization running the AutoPass License Server. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to the vulnerable service. Successful exploitation of this vulnerability could result in creation ...