RULE(RULE ID:316846)

Rule General Information
Release Date: 2020-05-18
Rule Name: Wavelink Emulation License Server HTTP Header Processing Buffer Overflow Vulnerability (CVE-2015-4059)
Severity:
CVE ID:
Rule Protection Details
Description: Heap-based buffer overflow in the License Server (LicenseServer.exe) in Wavelink Terminal Emulation (TE) allows remote attackers to execute arbitrary code via a large HTTP header.
Impact: A buffer overflow vulnerability can be triggered by an attacker in the context of the vulnerable product. Further attacks includes arbitrary code execution and denial of service.
Affected OS: Windows, Linux, FreeBSD, Solaris, Other Unix, Mac OS
Reference: SecurityFocusBID:74860
ZeroDayInitiative:ZDI-15-245
Solutions
The vendors have released upgrade patches to fix vulnerabilities, please visit:
https://www.wavelink.com/