Mathematica License Manager Arbitrary License Retrieval Vulnerability

Mathematica is a mathematical computation software package distributed and maintained by Wolfram Research.

It is possible for remote users to gain arbitrary access to Mathematica licenses. Depending upon the implementation of access control, a user may be able to request a license using a spoof request. Upon receiving the request, of the client name in the spoofed request is authorized a license, it will be sent.

This could result in the theft of Mathematica licenses, and potentially a denial of service from all licenses being in use.


Privacy Statement
Copyright 2010, SecurityFocus