CVE-2011-0517

CriticalCVSS 9.3/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in Sielco Sistemi Winlog Pro 2.07.00 and earlier, when Run TCP/IP server is enabled, allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted 0x02 opcode to TCP port 46823.

Metrics

CVSS 2.0 9.3/10AV:N/AC:M/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://aluigi.org/adv/winlog_1-adv.txtExploit
http://osvdb.org/70418
http://secunia.com/advisories/42894Vendor Advisory
http://securityreason.com/securityalert/8280
http://www.exploit-db.com/exploits/15992Exploit
http://www.kb.cert.org/vuls/id/496040US Government Resource
http://www.securityfocus.com/bid/45813Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf
http://www.vupen.com/english/advisories/2011/0126Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64716
http://aluigi.org/adv/winlog_1-adv.txtExploit
http://osvdb.org/70418
http://secunia.com/advisories/42894Vendor Advisory
http://securityreason.com/securityalert/8280
http://www.exploit-db.com/exploits/15992Exploit
http://www.kb.cert.org/vuls/id/496040US Government Resource
http://www.securityfocus.com/bid/45813Exploit
http://www.us-cert.gov/control_systems/pdf/ICSA-11-017-02.pdf
http://www.vupen.com/english/advisories/2011/0126Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/64716

Timeline

Published: Jan 20, 2011
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-05185.1Directory traversal vulnerability in core/lib/router.php in LotusCMS Fraise 3.0, when magic_quotes_gpc is disabled, allows remote attackers CVE-2011-05197.5SQL injection vulnerability in gallery.php in Gallarific PHP Photo Gallery script 2.1 and possibly other versions allows remote attackers to CVE-2011-05207.5The compress_add_dlabel_points function in dns/Compress.c in MaraDNS 1.4.03, 1.4.05, and probably other versions allows remote attackers to CVE-2011-05217.2The dvb_ca_ioctl function in drivers/media/dvb/ttpci/av7110_ca.c in the Linux kernel before 2.6.38-rc2 does not check the sign of a certain CVE-2011-05226.8The StripTags function in (1) the USF decoder (modules/codec/subtitles/subsdec.c) and (2) the Text decoder (modules/codec/subtitles/subsusf.CVE-2011-05231.9gypsy 0.8 does not properly restrict the files that can be read while running with root privileges, which allows local users to read otherwi CVE-2011-05242.1Multiple buffer overflows in the NMEA parser (nmea-gen.c) in gypsy 0.8 allow local users to cause a denial of service (crash) via unspecifie CVE-2011-05258.8Batavi before 1.0 has CSRF.CVE-2011-05264.3Cross-site scripting (XSS) vulnerability in index.php in Vanilla Forums before 2.0.17 allows remote attackers to inject arbitrary web script CVE-2011-05275.0VMware vFabric tc Server (aka SpringSource tc Server) 2.0.x before 2.0.6.RELEASE and 2.1.x before 2.1.2.RELEASE accepts obfuscated passwords CVE-2011-05285.5Puppet 2.6.0 through 2.6.3 does not properly restrict access to node resources, which allows remote authenticated Puppet nodes to read or mo CVE-2011-05297.5Weborf before 0.12.5 is affected by a Denial of Service (DOS) due to malformed fields in HTTP.