Vulnerability-Lookup

CVE-2011-0517 (GCVE-0-2011-0517)

Vulnerability from cvelistv5 – Published: 2011-01-20 18:00 – Updated: 2024-08-06 21:58

Summary

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root

References

10 references

URL	Tags
http://securityreason.com/securityalert/8280	third-party-advisoryx_refsource_SREASON
http://aluigi.org/adv/winlog_1-adv.txt	x_refsource_MISC
http://www.vupen.com/english/advisories/2011/0126	vdb-entryx_refsource_VUPEN
http://secunia.com/advisories/42894	third-party-advisoryx_refsource_SECUNIA
http://osvdb.org/70418	vdb-entryx_refsource_OSVDB
http://www.kb.cert.org/vuls/id/496040	third-party-advisoryx_refsource_CERT-VN
http://www.securityfocus.com/bid/45813	vdb-entryx_refsource_BID
http://www.us-cert.gov/control_systems/pdf/ICSA-1…	x_refsource_MISC
http://www.exploit-db.com/exploits/15992	exploitx_refsource_EXPLOIT-DB
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF

Date Public

2011-01-13 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:58:25.667Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "8280",
            "tags": [
              "third-party-advisory",
              "x_refsource_SREASON",
              "x_transferred"
            ],
            "url": "http://securityreason.com/securityalert/8280"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.org/adv/winlog_1-adv.txt"
          },
          {
            "name": "ADV-2011-0126",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0126"
          },
          {
            "name": "42894",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/42894"
          },
          {
            "name": "70418",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/70418"
          },
          {
            "name": "VU#496040",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT-VN",
              "x_transferred"
            ],
            "url": "http://www.kb.cert.org/vuls/id/496040"
          },
          {
            "name": "45813",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/45813"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
          },
          {
            "name": "15992",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "http://www.exploit-db.com/exploits/15992"
          },
          {
            "name": "winlog-tcpip-bo(64716)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-01-13T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "8280",
          "tags": [
            "third-party-advisory",
            "x_refsource_SREASON"
          ],
          "url": "http://securityreason.com/securityalert/8280"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.org/adv/winlog_1-adv.txt"
        },
        {
          "name": "ADV-2011-0126",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0126"
        },
        {
          "name": "42894",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/42894"
        },
        {
          "name": "70418",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/70418"
        },
        {
          "name": "VU#496040",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT-VN"
          ],
          "url": "http://www.kb.cert.org/vuls/id/496040"
        },
        {
          "name": "45813",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/45813"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
        },
        {
          "name": "15992",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "http://www.exploit-db.com/exploits/15992"
        },
        {
          "name": "winlog-tcpip-bo(64716)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-0517",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "8280",
              "refsource": "SREASON",
              "url": "http://securityreason.com/securityalert/8280"
            },
            {
              "name": "http://aluigi.org/adv/winlog_1-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.org/adv/winlog_1-adv.txt"
            },
            {
              "name": "ADV-2011-0126",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2011/0126"
            },
            {
              "name": "42894",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/42894"
            },
            {
              "name": "70418",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/70418"
            },
            {
              "name": "VU#496040",
              "refsource": "CERT-VN",
              "url": "http://www.kb.cert.org/vuls/id/496040"
            },
            {
              "name": "45813",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/45813"
            },
            {
              "name": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf",
              "refsource": "MISC",
              "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
            },
            {
              "name": "15992",
              "refsource": "EXPLOIT-DB",
              "url": "http://www.exploit-db.com/exploits/15992"
            },
            {
              "name": "winlog-tcpip-bo(64716)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2011-0517",
    "datePublished": "2011-01-20T18:00:00.000Z",
    "dateReserved": "2011-01-20T00:00:00.000Z",
    "dateUpdated": "2024-08-06T21:58:25.667Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2011-0517",
      "date": "2026-09-28",
      "epss": "0.40462",
      "percentile": "0.98602"
    },
    "fkie_nvd": {
      "configurations": [
        {
          "nodes": [
            {
              "cpeMatch": [
                {
                  "criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*",
                  "matchCriteriaId": "E6B483F0-305B-4BE3-9EE8-30BFF7A06B66",
                  "versionEndIncluding": "2.07.00",
                  "vulnerable": true
                }
              ],
              "negate": false,
              "operator": "OR"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823."
        },
        {
          "lang": "es",
          "value": "Desbordamiento de b\u00fafer basado en pila en Sielco Sistemi Winlog Pro v2.07.00 y anteriores, cuando el server Run TCP/IP est\u00e1 habilitado, permite a atacantes remotos generar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) y ejecutar c\u00f3digo arbitrario mediante el opcode 0x02 para el puerto TCP 46923"
        }
      ],
      "id": "CVE-2011-0517",
      "lastModified": "2024-11-21T01:24:11.917",
      "metrics": {
        "cvssMetricV2": [
          {
            "acInsufInfo": false,
            "baseSeverity": "HIGH",
            "cvssData": {
              "accessComplexity": "MEDIUM",
              "accessVector": "NETWORK",
              "authentication": "NONE",
              "availabilityImpact": "COMPLETE",
              "baseScore": 9.3,
              "confidentialityImpact": "COMPLETE",
              "integrityImpact": "COMPLETE",
              "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
              "version": "2.0"
            },
            "exploitabilityScore": 8.6,
            "impactScore": 10.0,
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "source": "nvd@nist.gov",
            "type": "Primary",
            "userInteractionRequired": false
          }
        ]
      },
      "published": "2011-01-20T19:00:12.287",
      "references": [
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit"
          ],
          "url": "http://aluigi.org/adv/winlog_1-adv.txt"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://osvdb.org/70418"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/42894"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://securityreason.com/securityalert/8280"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit"
          ],
          "url": "http://www.exploit-db.com/exploits/15992"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.kb.cert.org/vuls/id/496040"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Exploit"
          ],
          "url": "http://www.securityfocus.com/bid/45813"
        },
        {
          "source": "cve@mitre.org",
          "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
        },
        {
          "source": "cve@mitre.org",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0126"
        },
        {
          "source": "cve@mitre.org",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit"
          ],
          "url": "http://aluigi.org/adv/winlog_1-adv.txt"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://osvdb.org/70418"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://secunia.com/advisories/42894"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://securityreason.com/securityalert/8280"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit"
          ],
          "url": "http://www.exploit-db.com/exploits/15992"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "US Government Resource"
          ],
          "url": "http://www.kb.cert.org/vuls/id/496040"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Exploit"
          ],
          "url": "http://www.securityfocus.com/bid/45813"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "tags": [
            "Vendor Advisory"
          ],
          "url": "http://www.vupen.com/english/advisories/2011/0126"
        },
        {
          "source": "af854a3a-2127-422b-91ae-364da2661108",
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
        }
      ],
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": [
        {
          "description": [
            {
              "lang": "en",
              "value": "CWE-119"
            }
          ],
          "source": "nvd@nist.gov",
          "type": "Primary"
        }
      ]
    },
    "nvd": {
      "cve": {
        "configurations": [
          {
            "nodes": [
              {
                "cpeMatch": [
                  {
                    "criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*",
                    "matchCriteriaId": "E6B483F0-305B-4BE3-9EE8-30BFF7A06B66",
                    "versionEndIncluding": "2.07.00",
                    "vulnerable": true
                  }
                ],
                "negate": false,
                "operator": "OR"
              }
            ]
          }
        ],
        "cveTags": [],
        "descriptions": [
          {
            "lang": "en",
            "value": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823."
          },
          {
            "lang": "es",
            "value": "Desbordamiento de b\u00fafer basado en pila en Sielco Sistemi Winlog Pro v2.07.00 y anteriores, cuando el server Run TCP/IP est\u00e1 habilitado, permite a atacantes remotos generar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) y ejecutar c\u00f3digo arbitrario mediante el opcode 0x02 para el puerto TCP 46923"
          }
        ],
        "id": "CVE-2011-0517",
        "lastModified": "2026-04-29T01:13:23.040",
        "metrics": {
          "cvssMetricV2": [
            {
              "acInsufInfo": false,
              "baseSeverity": "HIGH",
              "cvssData": {
                "accessComplexity": "MEDIUM",
                "accessVector": "NETWORK",
                "authentication": "NONE",
                "availabilityImpact": "COMPLETE",
                "baseScore": 9.3,
                "confidentialityImpact": "COMPLETE",
                "integrityImpact": "COMPLETE",
                "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
                "version": "2.0"
              },
              "exploitabilityScore": 8.6,
              "impactScore": 10.0,
              "obtainAllPrivilege": false,
              "obtainOtherPrivilege": false,
              "obtainUserPrivilege": false,
              "source": "nvd@nist.gov",
              "type": "Primary",
              "userInteractionRequired": false
            }
          ]
        },
        "published": "2011-01-20T19:00:12.287",
        "references": [
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit"
            ],
            "url": "http://aluigi.org/adv/winlog_1-adv.txt"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://osvdb.org/70418"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/42894"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://securityreason.com/securityalert/8280"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit"
            ],
            "url": "http://www.exploit-db.com/exploits/15992"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/496040"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Exploit"
            ],
            "url": "http://www.securityfocus.com/bid/45813"
          },
          {
            "source": "cve@mitre.org",
            "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
          },
          {
            "source": "cve@mitre.org",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0126"
          },
          {
            "source": "cve@mitre.org",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://aluigi.org/adv/winlog_1-adv.txt"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://osvdb.org/70418"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://secunia.com/advisories/42894"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://securityreason.com/securityalert/8280"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://www.exploit-db.com/exploits/15992"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "US Government Resource"
            ],
            "url": "http://www.kb.cert.org/vuls/id/496040"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Exploit"
            ],
            "url": "http://www.securityfocus.com/bid/45813"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "tags": [
              "Vendor Advisory"
            ],
            "url": "http://www.vupen.com/english/advisories/2011/0126"
          },
          {
            "source": "af854a3a-2127-422b-91ae-364da2661108",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
          }
        ],
        "sourceIdentifier": "cve@mitre.org",
        "vulnStatus": "Modified",
        "weaknesses": [
          {
            "description": [
              {
                "lang": "en",
                "value": "CWE-119"
              }
            ],
            "source": "nvd@nist.gov",
            "type": "Primary"
          }
        ]
      }
    }
  }
}

FKIE_CVE-2011-0517

Vulnerability from fkie_nvd - Published: 2011-01-20 19:00 - Updated: 2026-06-16 23:27

Severity

Summary

References

URL	Tags
cve@mitre.org	http://aluigi.org/adv/winlog_1-adv.txt	Exploit
cve@mitre.org	http://osvdb.org/70418
cve@mitre.org	http://secunia.com/advisories/42894	Vendor Advisory
cve@mitre.org	http://securityreason.com/securityalert/8280
cve@mitre.org	http://www.exploit-db.com/exploits/15992	Exploit
cve@mitre.org	http://www.kb.cert.org/vuls/id/496040	US Government Resource
cve@mitre.org	http://www.securityfocus.com/bid/45813	Exploit
cve@mitre.org	http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf
cve@mitre.org	http://www.vupen.com/english/advisories/2011/0126	Vendor Advisory
cve@mitre.org	https://exchange.xforce.ibmcloud.com/vulnerabilities/64716
af854a3a-2127-422b-91ae-364da2661108	http://aluigi.org/adv/winlog_1-adv.txt	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/70418
af854a3a-2127-422b-91ae-364da2661108	http://secunia.com/advisories/42894	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://securityreason.com/securityalert/8280
af854a3a-2127-422b-91ae-364da2661108	http://www.exploit-db.com/exploits/15992	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://www.kb.cert.org/vuls/id/496040	US Government Resource
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/45813	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf
af854a3a-2127-422b-91ae-364da2661108	http://www.vupen.com/english/advisories/2011/0126	Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	https://exchange.xforce.ibmcloud.com/vulnerabilities/64716

Impacted products

	Vendor	Product	Version
	sielcosistemi	winlog_pro	*

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E6B483F0-305B-4BE3-9EE8-30BFF7A06B66",
              "versionEndIncluding": "2.07.00",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en pila en Sielco Sistemi Winlog Pro v2.07.00 y anteriores, cuando el server Run TCP/IP est\u00e1 habilitado, permite a atacantes remotos generar una denegaci\u00f3n de servicio (ca\u00edda de la aplicaci\u00f3n) y ejecutar c\u00f3digo arbitrario mediante el opcode 0x02 para el puerto TCP 46923"
    }
  ],
  "id": "CVE-2011-0517",
  "lastModified": "2026-06-16T23:27:32.807",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2011-01-20T19:00:12.287",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://aluigi.org/adv/winlog_1-adv.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/70418"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/42894"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securityreason.com/securityalert/8280"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.exploit-db.com/exploits/15992"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/496040"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/45813"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0126"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://aluigi.org/adv/winlog_1-adv.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/70418"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/42894"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securityreason.com/securityalert/8280"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.exploit-db.com/exploits/15992"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "US Government Resource"
      ],
      "url": "http://www.kb.cert.org/vuls/id/496040"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/45813"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2011/0126"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-M9XQ-XGVF-JW86

Vulnerability from github – Published: 2022-05-17 02:02 – Updated: 2022-05-17 02:02

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2011-0517"
  ],
  "database_specific": {
    "cwe_ids": [
      "CWE-119"
    ],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2011-01-20T19:00:00Z",
    "severity": "HIGH"
  },
  "details": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823.",
  "id": "GHSA-m9xq-xgvf-jw86",
  "modified": "2022-05-17T02:02:13Z",
  "published": "2022-05-17T02:02:13Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2011-0517"
    },
    {
      "type": "WEB",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
    },
    {
      "type": "WEB",
      "url": "http://aluigi.org/adv/winlog_1-adv.txt"
    },
    {
      "type": "WEB",
      "url": "http://osvdb.org/70418"
    },
    {
      "type": "WEB",
      "url": "http://secunia.com/advisories/42894"
    },
    {
      "type": "WEB",
      "url": "http://securityreason.com/securityalert/8280"
    },
    {
      "type": "WEB",
      "url": "http://www.exploit-db.com/exploits/15992"
    },
    {
      "type": "WEB",
      "url": "http://www.kb.cert.org/vuls/id/496040"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/45813"
    },
    {
      "type": "WEB",
      "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
    },
    {
      "type": "WEB",
      "url": "http://www.vupen.com/english/advisories/2011/0126"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2011-0517

Vulnerability from gsd - Updated: 2023-12-13 01:19

Details

Aliases

CVE-2011-0517

Aliases

CVE-2011-0517

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2011-0517",
    "description": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823.",
    "id": "GSD-2011-0517",
    "references": [
      "https://packetstormsecurity.com/files/cve/CVE-2011-0517"
    ]
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2011-0517"
      ],
      "details": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823.",
      "id": "GSD-2011-0517",
      "modified": "2023-12-13T01:19:04.773958Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2011-0517",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "8280",
            "refsource": "SREASON",
            "url": "http://securityreason.com/securityalert/8280"
          },
          {
            "name": "http://aluigi.org/adv/winlog_1-adv.txt",
            "refsource": "MISC",
            "url": "http://aluigi.org/adv/winlog_1-adv.txt"
          },
          {
            "name": "ADV-2011-0126",
            "refsource": "VUPEN",
            "url": "http://www.vupen.com/english/advisories/2011/0126"
          },
          {
            "name": "42894",
            "refsource": "SECUNIA",
            "url": "http://secunia.com/advisories/42894"
          },
          {
            "name": "70418",
            "refsource": "OSVDB",
            "url": "http://osvdb.org/70418"
          },
          {
            "name": "VU#496040",
            "refsource": "CERT-VN",
            "url": "http://www.kb.cert.org/vuls/id/496040"
          },
          {
            "name": "45813",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/45813"
          },
          {
            "name": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf",
            "refsource": "MISC",
            "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
          },
          {
            "name": "15992",
            "refsource": "EXPLOIT-DB",
            "url": "http://www.exploit-db.com/exploits/15992"
          },
          {
            "name": "winlog-tcpip-bo(64716)",
            "refsource": "XF",
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.07.00",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2011-0517"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-119"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "42894",
              "refsource": "SECUNIA",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://secunia.com/advisories/42894"
            },
            {
              "name": "http://aluigi.org/adv/winlog_1-adv.txt",
              "refsource": "MISC",
              "tags": [
                "Exploit"
              ],
              "url": "http://aluigi.org/adv/winlog_1-adv.txt"
            },
            {
              "name": "ADV-2011-0126",
              "refsource": "VUPEN",
              "tags": [
                "Vendor Advisory"
              ],
              "url": "http://www.vupen.com/english/advisories/2011/0126"
            },
            {
              "name": "45813",
              "refsource": "BID",
              "tags": [
                "Exploit"
              ],
              "url": "http://www.securityfocus.com/bid/45813"
            },
            {
              "name": "15992",
              "refsource": "EXPLOIT-DB",
              "tags": [
                "Exploit"
              ],
              "url": "http://www.exploit-db.com/exploits/15992"
            },
            {
              "name": "70418",
              "refsource": "OSVDB",
              "tags": [],
              "url": "http://osvdb.org/70418"
            },
            {
              "name": "VU#496040",
              "refsource": "CERT-VN",
              "tags": [
                "US Government Resource"
              ],
              "url": "http://www.kb.cert.org/vuls/id/496040"
            },
            {
              "name": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf",
              "refsource": "MISC",
              "tags": [],
              "url": "http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf"
            },
            {
              "name": "8280",
              "refsource": "SREASON",
              "tags": [],
              "url": "http://securityreason.com/securityalert/8280"
            },
            {
              "name": "winlog-tcpip-bo(64716)",
              "refsource": "XF",
              "tags": [],
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "integrityImpact": "COMPLETE",
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          "exploitabilityScore": 8.6,
          "impactScore": 10.0,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "HIGH",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2017-08-17T01:33Z",
      "publishedDate": "2011-01-20T19:00Z"
    }
  }
}

ICSA-11-017-02

Vulnerability from csaf_cisa - Published: 2011-10-20 06:00 - Updated: 2025-06-09 17:26

Summary

Sielco Sistemi WinLog Stack Overflow

Scope

1 vulnerability in this advisory, including CVE-2011-0517.

CVE-2011-0517

8.1 (High)


                
                  CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Known affected: 2 products

Open the full advisory

VAR-201101-0361

Vulnerability from variot - Updated: 2023-12-18 13:20

Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823. Sielco Sistemi Winlog of TCP/IP The server contains a buffer overflow vulnerability. Sielco Sistemi Winlog In “Run TCP/IP server” There is a function of 46823/tcp using. A stack buffer overflow vulnerability exists in processing crafted packets. Attack code using this vulnerability has been released.Service disruption by a remote third party (DoS) An attacker may be able to attack or execute arbitrary code. Winlog Pro is an application for data acquisition and remote control of SCADA HMI monitoring software. The SCADA software can be run as a TCP/IP server by listening to the TCP 46823 port by enabling the \"Run TCP/IP server\" option in the project section \"Configuration->Options->TCP/IP\". The 0x02 opcode of the protocol is used to process some strings received by the client, and a function such as _TCPIP_WriteNumValueFP, _TCPIP_WriteDigValueFP or _TCPIP_WriteStrValueFP is called according to the data type. They parse the data using the same function at offset 00446795, and there is a stack overflow when copying the input data to the temporary buffer: 00446795 /$ 55 PUSH EBP 00446796 |. 8BEC MOV EBP, ESP 00446798 |. 83C4 C0 ADD ESP, -40 0044679B |. 53 PUSH EBX 0044679C |. 56 PUSH ESI 0044679D |. 57 PUSH EDI 0044679E |. 8B45 0C MOV EAX, DWORD PTR SS:[EBP+C] 004467A1 |. 8B5D 08 MOV EBX,DWORD PTR SS:[ EBP+8] 004467A4 |. 8BF8 MOV EDI,EAX 004467A6 |. 33C0 XOR EAX,EAX 004467A8 |. 56 PUSH ESI 004467A9 |. 83C9 FF OR ECX,FFFFFFFF 004467AC |. F2:AE REPNE SCAS BYTE PTR ES:[EDI] ; stren 004467AE |. F7D1 NOT ECX 004467B0 |. 2BF9 SUB EDI,ECX 004467B2 |. 8D75 C0 LEA ESI,DWORD PTR SS:[EBP-40] 004467B5 |. 87F7 XCHG EDI,ESI 004467B7 |. 8BD1 MOV EDX,ECX 004467B9 |. 8BC7 MOV EAX, EDI 00446 7BB |. C1E9 02 SHR ECX,2 004467BE |. F3:A5 REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS:[ESI] ; memcpy. Winlog Pro is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input. Failed attacks will cause denial-of-service conditions. Winlog Pro 2.07.00 is vulnerable; other versions may also be affected. ----------------------------------------------------------------------

Secure your corporate defenses and reduce complexity in handling vulnerability threats with the new Secunia Vulnerability Intelligence Manager (VIM).

Request a free trial: http://secunia.com/products/corporate/vim/

TITLE: Winlog Pro TCP/IP Server Buffer Overflow Vulnerability

SECUNIA ADVISORY ID: SA42894

VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/42894/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=42894

RELEASE DATE: 2011-01-15

DISCUSS ADVISORY: http://secunia.com/advisories/42894/#comments

AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s)

http://secunia.com/advisories/42894/

ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS

https://ca.secunia.com/?page=viewadvisory&vuln_id=42894

ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING

http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

DESCRIPTION: Luigi Auriemma has reported a vulnerability in Winlog Pro, which can be exploited by malicious people to compromise a vulnerable system.

Successful exploitation may allow execution of arbitrary code, but requires the "Run TCP/IP Server" option to be enabled (disabled by default).

SOLUTION: Update to version 2.07.01.

PROVIDED AND/OR DISCOVERED BY: Luigi Auriemma

ORIGINAL ADVISORY: http://aluigi.altervista.org/adv/winlog_1-adv.txt

OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

DEEP LINKS: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

EXPLOIT: Further details available in Customer Area: http://secunia.com/products/corporate/EVM/

About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities.

Subscribe: http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/

Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.

Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201101-0361",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "winlog pro",
        "scope": "lte",
        "trust": 1.0,
        "vendor": "sielcosistemi",
        "version": "2.07.00"
      },
      {
        "model": "sistemi winlog pro",
        "scope": "eq",
        "trust": 0.9,
        "vendor": "sielco",
        "version": "2.7"
      },
      {
        "model": null,
        "scope": null,
        "trust": 0.8,
        "vendor": "sielco",
        "version": null
      },
      {
        "model": "winlog lite",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "sielco sistemi",
        "version": "2.07.01 earlier"
      },
      {
        "model": "winlog pro",
        "scope": "lt",
        "trust": 0.8,
        "vendor": "sielco sistemi",
        "version": "2.07.01 earlier"
      },
      {
        "model": "winlog pro",
        "scope": "eq",
        "trust": 0.6,
        "vendor": "sielcosistemi",
        "version": "2.07.00"
      },
      {
        "model": null,
        "scope": "eq",
        "trust": 0.4,
        "vendor": "winlog pro",
        "version": "*"
      },
      {
        "model": "sistemi winlog pro",
        "scope": "ne",
        "trust": 0.3,
        "vendor": "sielco",
        "version": "2.7.1"
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CERT/CC",
        "id": "VU#496040"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      },
      {
        "db": "BID",
        "id": "45813"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-0517"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:sielcosistemi:winlog_pro:*:*:*:*:*:*:*:*",
                "cpe_name": [],
                "versionEndIncluding": "2.07.00",
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2011-0517"
      }
    ]
  },
  "credits": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/credits#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Luigi Auriemma",
    "sources": [
      {
        "db": "BID",
        "id": "45813"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ],
    "trust": 0.9
  },
  "cve": "CVE-2011-0517",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": false,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Complete",
            "baseScore": 9.3,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "CVE-2011-0517",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.2,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.9 [IVD]"
          },
          {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "IVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "id": "1836b484-1fa3-11e6-abef-000c29c66e3d",
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "severity": "HIGH",
            "trust": 0.2,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.9 [IVD]"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2011-0517",
            "trust": 1.8,
            "value": "HIGH"
          },
          {
            "author": "CARNEGIE MELLON",
            "id": "VU#496040",
            "trust": 0.8,
            "value": "1.10"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201101-322",
            "trust": 0.6,
            "value": "CRITICAL"
          },
          {
            "author": "IVD",
            "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1",
            "trust": 0.2,
            "value": "CRITICAL"
          },
          {
            "author": "IVD",
            "id": "1836b484-1fa3-11e6-abef-000c29c66e3d",
            "trust": 0.2,
            "value": "CRITICAL"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CERT/CC",
        "id": "VU#496040"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-0517"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823. Sielco Sistemi Winlog of TCP/IP The server contains a buffer overflow vulnerability. Sielco Sistemi Winlog In \u201cRun TCP/IP server\u201d There is a function of 46823/tcp using. A stack buffer overflow vulnerability exists in processing crafted packets. Attack code using this vulnerability has been released.Service disruption by a remote third party (DoS) An attacker may be able to attack or execute arbitrary code. Winlog Pro is an application for data acquisition and remote control of SCADA HMI monitoring software. The SCADA software can be run as a TCP/IP server by listening to the TCP 46823 port by enabling the \\\"Run TCP/IP server\\\" option in the project section \\\"Configuration-\u003eOptions-\u003eTCP/IP\\\". The 0x02 opcode of the protocol is used to process some strings received by the client, and a function such as _TCPIP_WriteNumValueFP, _TCPIP_WriteDigValueFP or _TCPIP_WriteStrValueFP is called according to the data type. They parse the data using the same function at offset 00446795, and there is a stack overflow when copying the input data to the temporary buffer: 00446795 /$ 55 PUSH EBP 00446796 |. 8BEC MOV EBP, ESP 00446798 |. 83C4 C0 ADD ESP, -40 0044679B |. 53 PUSH EBX 0044679C |. 56 PUSH ESI 0044679D |. 57 PUSH EDI 0044679E |. 8B45 0C MOV EAX, DWORD PTR SS:[EBP+C] 004467A1 |. 8B5D 08 MOV EBX,DWORD PTR SS:[ EBP+8] 004467A4 |. 8BF8 MOV EDI,EAX 004467A6 |. 33C0 XOR EAX,EAX 004467A8 |. 56 PUSH ESI 004467A9 |. 83C9 FF OR ECX,FFFFFFFF 004467AC |. F2:AE REPNE SCAS BYTE PTR ES:[EDI] ; stren 004467AE |. F7D1 NOT ECX 004467B0 |. 2BF9 SUB EDI,ECX 004467B2 |. 8D75 C0 LEA ESI,DWORD PTR SS:[EBP-40] 004467B5 |. 87F7 XCHG EDI,ESI 004467B7 |. 8BD1 MOV EDX,ECX 004467B9 |. 8BC7 MOV EAX, EDI 00446 7BB |. C1E9 02 SHR ECX,2 004467BE |. F3:A5 REP MOVS DWORD PTR ES:[EDI],DWORD PTR DS:[ESI] ; memcpy. Winlog Pro is prone to a stack-based buffer-overflow vulnerability because it fails to adequately bounds-check user-supplied input. Failed attacks will cause denial-of-service conditions. \nWinlog Pro 2.07.00 is vulnerable; other versions may also be affected. ----------------------------------------------------------------------\n\n\nSecure your corporate defenses and reduce complexity in handling vulnerability threats with the new Secunia Vulnerability Intelligence Manager (VIM). \n\nRequest a free trial: \nhttp://secunia.com/products/corporate/vim/\n\n\n----------------------------------------------------------------------\n\nTITLE:\nWinlog Pro TCP/IP Server Buffer Overflow Vulnerability\n\nSECUNIA ADVISORY ID:\nSA42894\n\nVERIFY ADVISORY:\nSecunia.com\nhttp://secunia.com/advisories/42894/\nCustomer Area (Credentials Required)\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=42894\n\nRELEASE DATE:\n2011-01-15\n\nDISCUSS ADVISORY:\nhttp://secunia.com/advisories/42894/#comments\n\nAVAILABLE ON SITE AND IN CUSTOMER AREA:\n * Last Update\n * Popularity\n * Comments\n * Criticality Level\n * Impact\n * Where\n * Solution Status\n * Operating System / Software\n * CVE Reference(s)\n\nhttp://secunia.com/advisories/42894/\n\nONLY AVAILABLE IN CUSTOMER AREA:\n * Authentication Level\n * Report Reliability\n * Secunia PoC\n * Secunia Analysis\n * Systems Affected\n * Approve Distribution\n * Remediation Status\n * Secunia CVSS Score\n * CVSS\n\nhttps://ca.secunia.com/?page=viewadvisory\u0026vuln_id=42894\n\nONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI:\n * AUTOMATED SCANNING\n\nhttp://secunia.com/vulnerability_scanning/personal/\nhttp://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/\n\nDESCRIPTION:\nLuigi Auriemma has reported a vulnerability in Winlog Pro, which can\nbe exploited by malicious people to compromise a vulnerable system. \n\nSuccessful exploitation may allow execution of arbitrary code, but\nrequires the \"Run TCP/IP Server\" option to be enabled (disabled by\ndefault). \n\nSOLUTION:\nUpdate to version 2.07.01. \n\nPROVIDED AND/OR DISCOVERED BY:\nLuigi Auriemma\n\nORIGINAL ADVISORY:\nhttp://aluigi.altervista.org/adv/winlog_1-adv.txt\n\nOTHER REFERENCES:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nDEEP LINKS:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED DESCRIPTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXTENDED SOLUTION:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\nEXPLOIT:\nFurther details available in Customer Area:\nhttp://secunia.com/products/corporate/EVM/\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\nprivate users keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/advisories/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/advisories/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2011-0517"
      },
      {
        "db": "CERT/CC",
        "id": "VU#496040"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      },
      {
        "db": "BID",
        "id": "45813"
      },
      {
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "db": "PACKETSTORM",
        "id": "97557"
      }
    ],
    "trust": 3.6
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "BID",
        "id": "45813",
        "trust": 3.3
      },
      {
        "db": "NVD",
        "id": "CVE-2011-0517",
        "trust": 3.1
      },
      {
        "db": "ICS CERT",
        "id": "ICSA-11-017-02",
        "trust": 2.6
      },
      {
        "db": "CERT/CC",
        "id": "VU#496040",
        "trust": 2.6
      },
      {
        "db": "SECUNIA",
        "id": "42894",
        "trust": 2.5
      },
      {
        "db": "EXPLOIT-DB",
        "id": "15992",
        "trust": 2.4
      },
      {
        "db": "VUPEN",
        "id": "ADV-2011-0126",
        "trust": 2.4
      },
      {
        "db": "OSVDB",
        "id": "70418",
        "trust": 2.4
      },
      {
        "db": "XF",
        "id": "64716",
        "trust": 1.4
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194",
        "trust": 1.0
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322",
        "trust": 1.0
      },
      {
        "db": "SREASON",
        "id": "8280",
        "trust": 1.0
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-001154",
        "trust": 0.8
      },
      {
        "db": "NSFOCUS",
        "id": "17104",
        "trust": 0.6
      },
      {
        "db": "IVD",
        "id": "7D7E8B81-463F-11E9-9A21-000C29342CB1",
        "trust": 0.2
      },
      {
        "db": "IVD",
        "id": "1836B484-1FA3-11E6-ABEF-000C29C66E3D",
        "trust": 0.2
      },
      {
        "db": "PACKETSTORM",
        "id": "97557",
        "trust": 0.1
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CERT/CC",
        "id": "VU#496040"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      },
      {
        "db": "BID",
        "id": "45813"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "db": "PACKETSTORM",
        "id": "97557"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-0517"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ]
  },
  "id": "VAR-201101-0361",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      }
    ],
    "trust": 1.875
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "ICS"
        ],
        "sub_category": null,
        "trust": 1.0
      }
    ],
    "sources": [
      {
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      }
    ]
  },
  "last_update_date": "2023-12-18T13:20:18.358000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Top Page",
        "trust": 0.8,
        "url": "http://www.sielcosistemi.com/en/products/winlog_scada_hmi/index.html"
      },
      {
        "title": "Winlog Pro malformed message stack buffer overflow vulnerability patch",
        "trust": 0.6,
        "url": "https://www.cnvd.org.cn/patchinfo/show/2609"
      },
      {
        "title": "WinlogLite_Setup",
        "trust": 0.6,
        "url": "http://www.cnnvd.org.cn/web/xxk/bdxqbyid.tag?id=37217"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-119",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-0517"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 2.6,
        "url": "http://www.us-cert.gov/control_systems/pdf/icsa-11-017-02.pdf"
      },
      {
        "trust": 2.4,
        "url": "http://osvdb.org/70418"
      },
      {
        "trust": 2.4,
        "url": "http://secunia.com/advisories/42894"
      },
      {
        "trust": 2.4,
        "url": "http://www.securityfocus.com/bid/45813"
      },
      {
        "trust": 2.4,
        "url": "http://www.vupen.com/english/advisories/2011/0126"
      },
      {
        "trust": 1.8,
        "url": "http://www.kb.cert.org/vuls/id/496040"
      },
      {
        "trust": 1.6,
        "url": "http://aluigi.org/adv/winlog_1-adv.txt"
      },
      {
        "trust": 1.6,
        "url": "http://www.exploit-db.com/exploits/15992"
      },
      {
        "trust": 1.4,
        "url": "http://xforce.iss.net/xforce/xfdb/64716"
      },
      {
        "trust": 1.0,
        "url": "http://aluigi.altervista.org/adv/winlog_1-adv.txt"
      },
      {
        "trust": 1.0,
        "url": "http://securityreason.com/securityalert/8280"
      },
      {
        "trust": 1.0,
        "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/64716"
      },
      {
        "trust": 0.8,
        "url": "http://www.exploit-db.com/exploits/15992/"
      },
      {
        "trust": 0.8,
        "url": "http://www.sielcosistemi.com/download/winloglite_setup.exe"
      },
      {
        "trust": 0.8,
        "url": "http://www.sielcosistemi.com/download/winlog_setup_sf.exe"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2011-0517"
      },
      {
        "trust": 0.8,
        "url": "http://jvn.jp/cert/jvnvu496040"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2011-0517"
      },
      {
        "trust": 0.6,
        "url": "http://www.nsfocus.net/vulndb/17104"
      },
      {
        "trust": 0.3,
        "url": "http://www.sielcosistemi.com/en/products/winlog_scada_hmi/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/42894/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/products/corporate/evm/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/42894/#comments"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/secunia_security_advisories/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/products/corporate/vim/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/vulnerability_scanning/personal/"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
      },
      {
        "trust": 0.1,
        "url": "https://ca.secunia.com/?page=viewadvisory\u0026vuln_id=42894"
      },
      {
        "trust": 0.1,
        "url": "http://secunia.com/advisories/about_secunia_advisories/"
      }
    ],
    "sources": [
      {
        "db": "CERT/CC",
        "id": "VU#496040"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      },
      {
        "db": "BID",
        "id": "45813"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "db": "PACKETSTORM",
        "id": "97557"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-0517"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CERT/CC",
        "id": "VU#496040"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      },
      {
        "db": "BID",
        "id": "45813"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "db": "PACKETSTORM",
        "id": "97557"
      },
      {
        "db": "NVD",
        "id": "CVE-2011-0517"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2011-01-17T00:00:00",
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "date": "2011-01-17T00:00:00",
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "date": "2011-02-03T00:00:00",
        "db": "CERT/CC",
        "id": "VU#496040"
      },
      {
        "date": "2011-01-17T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      },
      {
        "date": "2011-01-14T00:00:00",
        "db": "BID",
        "id": "45813"
      },
      {
        "date": "2011-03-03T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "date": "2011-01-14T03:38:37",
        "db": "PACKETSTORM",
        "id": "97557"
      },
      {
        "date": "2011-01-20T19:00:12.287000",
        "db": "NVD",
        "id": "CVE-2011-0517"
      },
      {
        "date": "2011-01-21T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2011-02-03T00:00:00",
        "db": "CERT/CC",
        "id": "VU#496040"
      },
      {
        "date": "2011-01-17T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      },
      {
        "date": "2015-03-19T09:45:00",
        "db": "BID",
        "id": "45813"
      },
      {
        "date": "2011-03-03T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2011-001154"
      },
      {
        "date": "2017-08-17T01:33:35.853000",
        "db": "NVD",
        "id": "CVE-2011-0517"
      },
      {
        "date": "2011-01-21T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Winlog Pro Malformed message stack buffer overflow vulnerability",
    "sources": [
      {
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2011-0194"
      }
    ],
    "trust": 1.0
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Buffer overflow",
    "sources": [
      {
        "db": "IVD",
        "id": "7d7e8b81-463f-11e9-9a21-000c29342cb1"
      },
      {
        "db": "IVD",
        "id": "1836b484-1fa3-11e6-abef-000c29c66e3d"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201101-322"
      }
    ],
    "trust": 1.0
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted

CVE-2011-0517 (GCVE-0-2011-0517)

FKIE_CVE-2011-0517

GHSA-M9XQ-XGVF-JW86

GSD-2011-0517

ICSA-11-017-02

VAR-201101-0361

Tags

Sightings

Nomenclature

Related by attack behaviour