Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2011-4501 State: PUBLISHED Published: 2011-11-22T11:00:00Z Last Updated: 2024-09-17T01:26:26.089Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability. Additional Analyst Notes: - CVE Program Container: References: -
ce, related to an "external forwarding" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.upnp-hacks.org/devices.html - http://www.upnp-hacks.org/suspect.html - http://www.kb.cert.org/vuls/id/357851
CVE ID: CVE-2011-4502 State: PUBLISHED Published: 2011-11-22T11:00:00Z Last Updated: 2024-09-17T00:25:31.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPnP IGD implementation in Edimax EdiLinux on the Edimax BR-6104K with firmware before 3.25, Edimax 6114Wg, Canyon-Tech CN-WF512 with firmware 1.83, Canyon-Tech CN-WF514 with firmware 2.08, Sitecom WL-153 with firmware before 1.39, and Sweex LB000021 with firmware 3.15 allows remote attackers to execute arbitrary commands via shell metacharacters. Additional Analyst Notes: - CVE Program Container: References: - http://www.upnp-hacks.org/devices.html - http://www.upnp-hacks.org/suspect.html - http://www.kb.cert.org/vuls/id
nces: - http://www.upnp-hacks.org/devices.html - http://www.upnp-hacks.org/suspect.html - http://www.kb.cert.org/vuls/id/357851
CVE ID: CVE-2011-4503 State: PUBLISHED Published: 2011-11-22T11:00:00Z Last Updated: 2024-09-16T19:56:04.725Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPnP IGD implementation in Broadcom Linux on the Sitecom WL-111 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.upnp-hacks.org/suspect.html - http://www.kb.cert.org/vuls/id/357851
CVE ID: CVE-2011-4504 State: PUBLISHED Published: 2011-11-22T11:00:00Z Last Updated: 2024-09-16T16:43:13.126Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPnP IGD implementation in the Pseudo ICS UPnP software on the ZyXEL P-330W allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.upnp-hacks.org/suspect.html - http://www.kb.cert.org/vuls/id/357851
CVE ID: CVE-2011-4505 State: PUBLISHED Published: 2011-11-22T11:00:00Z Last Updated: 2024-09-16T20:32:49.543Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/357851 - http://toor.do/DEFCON-19-Garcia-UPnP-Mapping-WP.pdf
CVE ID: CVE-2011-4506 State: PUBLISHED Published: 2011-11-22T11:00:00Z Last Updated: 2024-09-16T18:23:18.227Z Vendors: n/a Products: n/a Problem Types: n/a Description: The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/357851 - http://toor.do/DEFCON-19-Garcia-UPnP-Mapping-WP.pdf
CVE ID: CVE-2011-4507 State: PUBLISHED Published: 2011-11-22T11:00:00Z Last Updated: 2024-09-17T03:47:35.559Z Vendors: n/a Products: n/a Problem Types: n/a Description: The D-Link DIR-685 router, when certain WPA and WPA2 configurations are used, does not maintain an encrypted wireless network during transfer of a large amount of network traffic, which allows remote attackers to obtain sensitive information or bypass authentication via a Wi-Fi device. Additional Analyst Notes: - CVE Program Container: References: - http://www.kb.cert.org/vuls/id/924307
CVE ID: CVE-2011-4508 State: PUBLISHED Published: 2012-02-03T20:00:00Z Last Updated: 2024-09-16T20:47:55.183Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime generates predictable authentication tokens for cookies, which makes it easier for remote attackers to bypass authentication via a crafted cookie. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungs
nal Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4509 State: PUBLISHED Published: 2012-02-03T20:00:00Z Last Updated: 2024-09-17T01:26:11.252Z Vendors: n/a Products: n/a Problem Types: n/a Description: The HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime has an improperly selected default password for the administrator account, which makes it easier for remote attackers to obtain access via a brute-force approach involving many HTTP requests. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool
uests. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4510 State: PUBLISHED Published: 2012-02-03T20:00:00Z Last Updated: 2024-09-16T18:28:15.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4511. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporat
ity than CVE-2011-4511. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4511 State: PUBLISHED Published: 2012-02-03T20:00:00Z Last Updated: 2024-09-16T20:07:51.541Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different vulnerability than CVE-2011-4510. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporat
ity than CVE-2011-4510. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4512 State: PUBLISHED Published: 2012-02-03T20:00:00Z Last Updated: 2024-09-16T18:09:01.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: CRLF injection vulnerability in the HMI web server in Siemens WinCC flexible 2004, 2005, 2007, and 2008 before SP3; WinCC V11 (aka TIA portal) before SP2 Update 1; the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de
rs. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4513 State: PUBLISHED Published: 2012-02-03T20:00:00Z Last Updated: 2024-09-16T22:31:15.150Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime allow user-assisted remote attackers to execute arbitrary code via a crafted project file, related to the HMI web server and runtime loader. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://ww
ttp://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4514 State: PUBLISHED Published: 2012-02-03T20:00:00Z Last Updated: 2024-09-17T03:27:33.362Z Vendors: n/a Products: n/a Problem Types: n/a Description: The TELNET daemon in Siemens WinCC flexible 2004, 2005, 2007, and 2008; WinCC V11 (aka TIA portal); the TP, OP, MP, Comfort Panels, and Mobile Panels SIMATIC HMI panels; WinCC V11 Runtime Advanced; and WinCC flexible Runtime does not perform authentication, which makes it easier for remote attackers to obtain access via a TCP session. Additional Analyst Notes: - CVE Program Container: References: - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.us-cer
w.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-345442.pdf - http://www.us-cert.gov/control_systems/pdf/ICSA-12-030-01.pdf
CVE ID: CVE-2011-4515 State: PUBLISHED Published: 2013-03-21T14:00:00Z Last Updated: 2024-09-17T03:07:52.777Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens WinCC (TIA Portal) 11 uses a reversible algorithm for storing HMI web-application passwords in world-readable and world-writable files, which allows local users to obtain sensitive information by leveraging (1) physical access or (2) Sm@rt Server access. Additional Analyst Notes: - CVE Program Container: References: - http://ics-cert.us-cert.gov/pdf/ICSA-13-079-03.pdf - http://www.siemens.com/corporate-technology/pool/de/forschungsfelder/siemens_security_advisory_ssa-212483.pdf
CVE ID: CVE-2011-4516 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-08-07T00:09:18.503Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in the jpc_cox_getcompparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted numrlvls value in a coding style default (COD) marker segment in a JPEG2000 file. Additional Analyst Notes: - CVE Program Container: References: - http://www.redhat.com/support/errata/RHSA-2011-1811.html - https://bugzilla.redhat.com/show_bug.cgi?id=747726 - http://secunia.com/advisories/47306 - http://www.ubu
11-1811.html - https://bugzilla.redhat.com/show_bug.cgi?id=747726 - http://secunia.com/advisories/47306 - http://www.ubuntu.com/usn/USN-1315-1 - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html - http://www.debian.org/security/2011/dsa-2371 - http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071458.html - http://www-01.ibm.com/support/docview.wss?uid=swg21660640 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071561.html - http://secunia.com/advisories/47353 - http://www.redhat.com/support/errata/RHSA-2011-1807.html - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html - http://osvdb.org/77595 - htt
2011-1807.html - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html - http://osvdb.org/77595 - http://rhn.redhat.com/errata/RHSA-2015-0698.html - http://www.kb.cert.org/vuls/id/887409 - http://www.securityfocus.com/bid/50992 - http://secunia.com/advisories/47193 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606
CVE ID: CVE-2011-4517 State: PUBLISHED Published: 2011-12-15T02:00:00 Last Updated: 2024-10-21T16:11:56.211Z Vendors: n/a Products: n/a Problem Types: n/a Description: The jpc_crg_getparms function in libjasper/jpc/jpc_cs.c in JasPer 1.900.1 uses an incorrect data type during a certain size calculation, which allows remote attackers to trigger a heap-based buffer overflow and execute arbitrary code, or cause a denial of service (heap memory corruption), via a crafted component registration (CRG) marker segment in a JPEG2000 file. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - http://www.redhat.com/support/errata/RHSA-2011-1811.html - https://bugzill
ainer: - CISA ADP Vulnrichment: References: - http://www.redhat.com/support/errata/RHSA-2011-1811.html - https://bugzilla.redhat.com/show_bug.cgi?id=747726 - http://secunia.com/advisories/47306 - http://www.ubuntu.com/usn/USN-1315-1 - http://lists.opensuse.org/opensuse-security-announce/2011-12/msg00010.html - http://www.debian.org/security/2011/dsa-2371 - http://lists.fedoraproject.org/pipermail/package-announce/2011-December/071458.html - http://www-01.ibm.com/support/docview.wss?uid=swg21660640 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071561.html - http://secunia.com/advisories/47353 - http://www.redhat.com/support/errata/RHSA-2011-1807.html - http://osvdb.
61.html - http://secunia.com/advisories/47353 - http://www.redhat.com/support/errata/RHSA-2011-1807.html - http://osvdb.org/77596 - http://www.oracle.com/technetwork/topics/security/cpujan2012-366304.html - http://rhn.redhat.com/errata/RHSA-2015-0698.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/71701 - http://www.kb.cert.org/vuls/id/887409 - http://www.securityfocus.com/bid/50992 - http://secunia.com/advisories/47193 - http://www.slackware.com/security/viewer.php?l=slackware-security&y=2015&m=slackware-security.538606
CVE ID: CVE-2011-4518 State: PUBLISHED Published: 2013-05-23T17:00:00Z Last Updated: 2024-09-16T16:22:34.224Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the PmWebDir object in the web server in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to read arbitrary files via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.promotic.eu/en/pmdoc/News.htm#ver80105 - http://ics-cert.us-cert.gov/advisories/ICSA-12-024-02
CVE ID: CVE-2011-4519 State: PUBLISHED Published: 2013-05-23T17:00:00Z Last Updated: 2024-09-16T17:34:28.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Stack-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a denial of service via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.promotic.eu/en/pmdoc/News.htm#ver80105 - http://ics-cert.us-cert.gov/advisories/ICSA-12-024-02
CVE ID: CVE-2011-4520 State: PUBLISHED Published: 2013-05-23T17:00:00Z Last Updated: 2024-09-16T18:49:04.812Z Vendors: n/a Products: n/a Problem Types: n/a Description: Heap-based buffer overflow in an ActiveX component in MICROSYS PROMOTIC before 8.1.5 allows remote attackers to cause a denial of service via a crafted web page. Additional Analyst Notes: - CVE Program Container: References: - http://www.promotic.eu/en/pmdoc/News.htm#ver80105 - http://ics-cert.us-cert.gov/advisories/ICSA-12-024-02
CVE ID: CVE-2011-4521 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-07T00:09:18.768Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary SQL commands via crafted string input. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2011-4522 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-07T00:09:18.764Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bwerrdn.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2011-4523 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-07T00:09:18.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in bwview.asp in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2011-4524 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-07T00:09:18.647Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in Advantech/BroadWin WebAccess before 7.0 allows remote attackers to execute arbitrary code via a long string value in unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2011-4525 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-07T00:09:18.806Z Vendors: n/a Products: n/a Problem Types: n/a Description: Advantech/BroadWin WebAccess before 7.0 allows remote attackers to trigger the extraction of arbitrary web content into a batch file on a client system, and execute this batch file, via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2011-4526 State: PUBLISHED Published: 2012-02-21T11:00:00 Last Updated: 2024-08-07T00:09:18.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in an ActiveX control in Advantech/BroadWin WebAccess before 7.0 might allow remote attackers to execute arbitrary code via a long string value in unspecified parameters. Additional Analyst Notes: - CVE Program Container: References: - http://www.us-cert.gov/control_systems/pdf/ICSA-12-047-01.pdf - http://www.securityfocus.com/bid/52051
CVE ID: CVE-2011-4528 State: PUBLISHED Published: 2011-12-20T11:00:00 Last Updated: 2024-08-07T00:09:18.826Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service (daemon crash) via a crafted response. Additional Analyst Notes: - CVE Program Container: References: - http://unbound.nlnetlabs.nl/downloads/CVE-2011-4528.txt - http://secunia.com/advisories/47326 - http://www.kb.cert.org/vuls/id/209659 - http://www.debian.org/security/2011/dsa-2370 - http://lists.fedoraproject.org/pipermail/package-announce/201
id/209659 - http://www.debian.org/security/2011/dsa-2370 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071535.html - http://osvdb.org/77909 - http://lists.fedoraproject.org/pipermail/package-announce/2012-January/071525.html
CVE ID: CVE-2011-4529 State: PUBLISHED Published: 2012-01-08T20:00:00Z Last Updated: 2024-09-17T01:46:10.128Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allow remote attackers to execute arbitrary code via a long serialid field in an _licensekey command, as demonstrated by the (1) check_licensekey or (2) read_licensekey command. Additional Analyst Notes: - CVE Program Container: References: - http://support.automation.siemens.com/WW/view/en/114358 - http://aluigi.altervista.org/adv/almsrvx_1-adv.txt - http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=572524
ltervista.org/adv/almsrvx_1-adv.txt - http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content - http://www.us-cert.gov/control_systems/pdf/ICSA-11-361-01.pdf
CVE ID: CVE-2011-4530 State: PUBLISHED Published: 2012-01-08T20:00:00Z Last Updated: 2024-09-16T17:15:01.650Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields, as demonstrated by fields to the (1) open_session->workstation->NAME or (2) grant->VERSION function. Additional Analyst Notes: - CVE Program Container: References: - http://support.automation.siemens.com/WW/view/en/114358 - http://aluigi.altervista.org/adv/almsrvx_1-adv.txt - http://support.automation.siem
tion.siemens.com/WW/view/en/114358 - http://aluigi.altervista.org/adv/almsrvx_1-adv.txt - http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content - http://www.us-cert.gov/control_systems/pdf/ICSA-11-361-01.pdf
CVE ID: CVE-2011-4531 State: PUBLISHED Published: 2012-01-08T20:00:00Z Last Updated: 2024-09-17T02:36:36.991Z Vendors: n/a Products: n/a Problem Types: n/a Description: Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via crafted content in a (1) get_target_ocx_param or (2) send_target_ocx_param command. Additional Analyst Notes: - CVE Program Container: References: - http://support.automation.siemens.com/WW/view/en/114358 - http://aluigi.altervista.org/adv/almsrvx_1-adv.txt - http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&no
rvx_1-adv.txt - http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content - http://www.us-cert.gov/control_systems/pdf/ICSA-11-361-01.pdf