The License Manager (mathlm) for Mathematica 4.0 and 4.1 allows remote attackers to bypass access control (specified by the -restrict argument) and steal a license via a client request that includes the name of a host that is allowed to obtain the license.
Link | Tags |
---|---|
https://exchange.xforce.ibmcloud.com/vulnerabilities/6927 | vdb entry |
http://www.securityfocus.com/archive/1/200462 | mailing list patch vendor advisory |
http://www.securityfocus.com/bid/3118 | vdb entry vendor advisory |