CVE-2011-4135

critical

Description

Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389.

References

http://www.zerodayinitiative.com/advisories/ZDI-11-272/

http://www.securityfocus.com/bid/49191

http://www.ibm.com/support/docview.wss?uid=swg21577760

http://www.flexerasoftware.com/pl/13057.htm

http://secunia.com/advisories/45615

http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1

Details

Source: Mitre, NVD

Published: 2012-01-19

Updated: 2012-01-23

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical