Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

FlexNet Publisher 11.10 may run attacker code

CVE-2011-4134 · published 14 years ago
Summary

FlexNet Publisher version 11.10 contains a coding mistake that lets a remote user send specially crafted data and cause the server to execute their own program. This can lead to unauthorized control of the license server. Apply the vendor's security update or upgrade to a newer version, and restrict network access to the server until it is fixed.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
flexerasoftware flexnet_publisher 11.10
cpe:2.3:a:flexerasoftware:flexnet_publisher:11.10:*:*:*:*:*:*:*
Original advisory text
Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allows remote attackers to execute arbitrary code via a crafted 0x2f packet.
Heap-based buffer overflow in lmadmin in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allows remote attackers to execute arbitrary code via a crafted 0x2f packet.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
10.0 Critical
Exploitation
5% chance of attack within 30 days
Type
CWE-119Buffer Overflow
Timeline
Published19 Jan 2012
Updated30 Oct 2026
First seen29 Sep 2026
Sources
CVE-2011-4134 · NVD
Track software like this
Free during beta