KLA10084 DoS vulnerability in Siemens ALM

A memory leak was found in Siemens ALM. By exploiting this vulnerability malicious users can cause denial of service. This vulnerability can be exploited remotely via specially designed packets. Original advisories Siemens bulletin Related products Automation-License-Manager CVE list CVE-2012-469...

HP Application Lifecycle Management ActiveX Control Insecure Method Exposure

An insecure method exposure vulnerability has been reported in HP Application Lifecycle Management ActiveX control. The vulnerability is due to using the node parameter as a pointer to a function pointer when handling a certain method. A remote attacker could exploit this vulnerability by enticin...

HP Application Lifecycle Management ActiveX Control Arbitrary File Overwrite

A directory traversal and file overwrite vulnerability has been reported in the HP Application Lifecycle Management ActiveX control...

HP ALM Remote Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 HttpClients::IE,...

HP Application Lifecycle Management ActiveX memory ovewritting

Memory overwritting of user-controlled address in XGO.ocx...

CVE-2011-4531

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted content in a 1 gettargetocxparam or 2 sendtargetocxparam command...

CVE-2011-4532

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager ALM 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method...

Design/Logic Flaw

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service exception and daemon crash via long fields, as demonstrated by fields to the 1 opensession-workstation-NAME or 2...

Null pointer dereference

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted content in a 1 gettargetocxparam or 2 sendtargetocxparam command...

CVE-2011-4532

CVE-2011-4532 concerns Siemens ALM: the ALMListView.ALMListCtrl ActiveX control (almaxcx.dll) in ALM GUI versions 2.0–5.1+SP1+Upd2 allows remote overwrite of arbitrary files via the Save method due to an absolute path traversal. The issue is tied to the ActiveX control used in the Siemens Automat...

CVE-2011-4531

Siemens ALM (Automation License Manager) versions 4.0–5.1+SP1+Upd1 are affected by a vulnerability where ALM does not validate content in certain commands (get_target_ocx_param, send_target_ocx_param), leading to a NULL pointer dereference and denial of service. Root cause: improper handling of f...

CVE-2011-4530

Siemens ALM (Automation License Manager) 4.0–5.1+SP1+Upd1 is affected by a vulnerability in how it handles fields coming from clients over the network. The issue arises from improper handling of field lengths in commands sent to the server (notably open_session->workstation->NAME and grant-...

CVE-2011-4529

Siemens Automation License Manager (ALM) versions 4.0–5.1+SP1+Upd1 contain buffer-overflow vulnerabilities in the _licensekey command’s handling of the serialid field (via check_licensekey/read_licensekey), allowing remote code execution. Exploitation is remotely feasible over TCP (port 4410) wit...

CVE-2011-4530

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service exception and daemon crash via long fields, as demonstrated by fields to the 1 opensession-workstation-NAME or 2...

CVE-2011-4531

Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via crafted content in a 1 gettargetocxparam or 2 sendtargetocxparam command...

CVE-2011-4532

Absolute path traversal vulnerability in the ALMListView.ALMListCtrl ActiveX control in almaxcx.dll in the graphical user interface in Siemens Automation License Manager ALM 2.0 through 5.1+SP1+Upd2 allows remote attackers to overwrite arbitrary files via the Save method...

CVE-2011-4529

Multiple buffer overflows in Siemens Automation License Manager ALM 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an licensekey command, as demonstrated by the 1 checklicensekey or 2 readlicensekey command...

CVE-2011-4834

The CVE-2011-4834 issue affects HP Application Lifecycle Management (ALM) 11 on AIX, HP-UX, and Solaris, specifically the GetInstalledPackages function in the configuration tool. It enables local privilege escalation via two attack vectors: (1) a Trojan horse placed in /tmp/tmp.txt as a FIFO, and...

0A29-11-2 : Privilege escalation vulnerability in HP Application Lifestyle Management (ALM) Platform v11

================ Privilege escalation vulnerability in HP Application Lifestyle Management ALM Platform v11 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ The HP Application Lifestyle Management...

HP Application Lifestyle Management Platform 11 Code Execution

================ Privilege escalation vulnerability in HP Application Lifestyle Management ALM Platform v11 Author: 0a29406d9794e4f9b30b3c5d6702c708 twitter.com/0a29 - 0a29.blogspot.com - GMail 0a2940 ================ Description: ================ The HP Application Lifestyle Management...