FlexNet License Server Manager 'lmgrd' Component Stack Buffer Overflow Vulnerability

Bugtraq ID:	52718
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 26 2012 12:00AM
Updated:	May 22 2012 01:30PM
Credit:	Luigi Auriemma and Alexander Gavrun
Vulnerable:	Flexera Software FlexNet License Server Manager 11.9.1
Not Vulnerable:	Flexera Software FlexNet License Server Manager 11.10

FlexNet License Server Manager 'lmgrd' Component Stack Buffer Overflow Vulnerability

FlexNet License Server Manager is prone to a remote stack-based buffer-overflow vulnerability.

Attackers can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

FlexNet License Server Manager 'lmgrd' Component Stack Buffer Overflow Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/52718.rb

FlexNet License Server Manager 'lmgrd' Component Stack Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please contact the vendor for more information.

FlexNet License Server Manager 'lmgrd' Component Stack Buffer Overflow Vulnerability

References:

• FlexNet License Server Manager stack overflow (Luigi Auriemma)
  
• Vendor Homepage (Flexera)
  
• FlexNet License Server Manager lmgrd Remote Code Execution Vulnerability (Zero Day Initiative)
  
• IMPORTANT NOTICE: Hotfix Available for Potential Security Vulnerability (Flexerasoftware)