CVE-2011-4530
Siemens Automation License Manager < 5.1 - Denial of Service via Long Field Input
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2011-4530.
AI-analyzed exploit summary This is a detailed technical analysis of multiple vulnerabilities in Siemens Automation License Manager, including buffer overflow, exceptions, NULL pointer dereference, and file overwriting. The writeup provides specific details on affected functions and exploitation methods.
Description
Siemens Automation License Manager (ALM) 4.0 through 5.1+SP1+Upd1 does not properly copy fields obtained from clients, which allows remote attackers to cause a denial of service (exception and daemon crash) via long fields, as demonstrated by fields to the (1) open_session->workstation->NAME or (2) grant->VERSION function.
Exploits (1)
This is a detailed technical analysis of multiple vulnerabilities in Siemens Automation License Manager, including buffer overflow, exceptions, NULL pointer dereference, and file overwriting. The writeup provides specific details on affected functions and exploitation methods.