Wibu-Systems CodeMeter TCP Message Denial of Service Vulnerability

Release date:
Updated on:

Affected Systems:
Wibu-Systems CodeMeter 4.30d
Wibu-Systems CodeMeter 4.30c
Unaffected system:
Wibu-Systems CodeMeter 4.40
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51382
Cve id: CVE-2011-4057

CodeMeter is the basic technology for all protection and authorization solutions provided by Wibu-Systems.

CodeMeter Runtime has a Denial-of-Service vulnerability when processing TCP packets. Attackers can exploit this vulnerability to cause the affected applications to crash and cause denial of service to legitimate users.

<* Source: Kuang-Chun Hung

Link: http://jvn.jp/en/jp/JVN78901873/index.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Wibu-Systems
------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.wibu.com/en/codemeter.html