NVD

Id
10926  
Name
CVE-2011-4530  
Description
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields, as demonstrated by fields to the (1) open_session->workstation->NAME or (2) grant->VERSION function.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2012-01-08  
Modified Date
2012-01-09  
Seq
2011-4530  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
61052 10926 CVE-2011-4530 http://aluigi.altervista.org/adv/almsrvx_1-adv.txt  View
61053 10926 CVE-2011-4530 http://support.automation.siemens.com/WW/llisapi.dll/57252401?func=ll&objId=57252401&objAction=csView&nodeid0=17323948&lang=en&siteid=cseus&aktprim=0&extranet=standard&viewreg=WW&load=content  View
61054 10926 CVE-2011-4530 http://support.automation.siemens.com/WW/view/en/114358  View
61055 10926 CVE-2011-4530 http://www.us-cert.gov/control_systems/pdf/ICSA-11-361-01.pdf  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25322 JVNDB-2012-001029 Siemens Automation License Manager におけるサービス運用妨害 (DoS) の脆弱性 Siemens Automation License Manager (ALM) は、クライアントから取得したフィールドを適切にコピーしないため、サービス運用妨害 (例外発生およびデーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-4530 52437 CVE-2011-4530 10926 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001029.html 2012-01-08 2012-01-11 View