CVE-2011-1205: Buffer Overflow
First published: Tue Mar 29 2011(Updated: )
Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer zone.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Rational ClearQuest | =7.0.1.3 | |
| IBM Rational ClearQuest | =7.0.1.7 | |
| IBM Rational ClearCase | =7.0.0.8 | |
| IBM Rational ClearQuest | =7.0.1.11 | |
| IBM Rational ClearQuest | =7.0.0.6 | |
| IBM Rational ClearCase | =7.0.0.7 | |
| IBM Rational ClearQuest | =7.0.1.1 | |
| IBM Rational ClearCase | =7.0.0.9 | |
| IBM Rational Common Licensing | =7.1 | |
| IBM Rational ClearCase | =7.0.1.4 | |
| IBM Rational ClearQuest | =7.0.0.9 | |
| IBM Rational ClearCase | =7.1.1.3 | |
| IBM Rational ClearCase | =7.0.0.6 | |
| IBM Rational Common Licensing | =7.0.1.1 | |
| IBM Rational ClearQuest | =7.0.1.8 | |
| IBM Rational ClearCase | =7.1.1 | |
| IBM Rational ClearCase | =7.0.1.11 | |
| IBM Rational ClearCase | =7.0.1.1 | |
| IBM Rational ClearCase | =7.0.1.6 | |
| IBM Rational ClearQuest | =7.1.0.1 | |
| IBM Rational ClearQuest | =7.0.1.6 | |
| IBM Rational ClearCase | =7.0.1.5 | |
| IBM Rational ClearQuest | =7.1.0.2 | |
| IBM Rational ClearCase | =7.0.0.4 | |
| IBM Rational ClearQuest | =7.0.1.0 | |
| IBM Rational ClearCase | =7.1.0.2 | |
| IBM Rational ClearCase | =7.0.1.3 | |
| IBM Rational Common Licensing | =7.1.1.2 | |
| IBM Rational ClearCase | =7.1.0.1 | |
| IBM Rational ClearQuest | =7.0.0.8 | |
| IBM Rational ClearCase | =7.0.1.10 | |
| IBM Rational Common Licensing | =7.1.1.1 | |
| IBM Rational ClearCase | =7.0.1.7 | |
| IBM Rational ClearCase | =7.0.1.9 | |
| IBM Rational Common Licensing | =7.1.1.3 | |
| IBM Rational Common Licensing | =7.0 | |
| IBM Rational ClearCase | =7.1.1.1 | |
| IBM Rational Common Licensing | =7.1.1 | |
| IBM Rational ClearQuest | =7.1.1.1 | |
| IBM Rational Common Licensing | =7.0.1 | |
| IBM Rational Common Licensing | =7.0.0.1 | |
| IBM Rational ClearQuest | =7.0.1.10 | |
| IBM Rational ClearCase | =7.1 | |
| IBM Rational ClearQuest | =7.1.1.4 | |
| IBM Rational ClearQuest | =7.1.1.3 | |
| IBM Rational ClearQuest | =7.0.1.5 | |
| IBM Rational ClearQuest | =7.1.1.2 | |
| IBM Rational ClearCase | =7.0.1.2 | |
| IBM Rational ClearQuest | =7.0.0.5 | |
| IBM Rational ClearQuest | =7.0.1 | |
| IBM Rational ClearCase | =7.1.1.4 | |
| IBM Rational ClearQuest | =7.1 | |
| IBM Rational ClearQuest | =7.0.0.4 | |
| IBM Rational ClearCase | =7.0.1 | |
| IBM Rational Common Licensing | =7.1.0.2 | |
| IBM Rational ClearCase | =7.0.1.8 | |
| IBM Rational Common Licensing | =7.0.3.1 | |
| IBM Rational ClearQuest | =7.0.1.2 | |
| IBM Rational Common Licensing | =7.1.1.4 | |
| IBM Rational Common Licensing | =7.0.0.2 | |
| IBM Rational ClearCase | =7.0.0.5 | |
| IBM Rational ClearQuest | =7.0.0.7 | |
| IBM Rational Common Licensing | =7.1.0.1 | |
| IBM Rational ClearCase | =7.1.1.2 | |
| IBM Rational ClearQuest | =7.0.1.4 | |
| IBM Rational ClearQuest | =7.0.1.9 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.ibm.com/support/docview.wss?uid=swg21470998
- http://www.securitytracker.com/id?1025268
- http://www.securitytracker.com/id?1025269
- http://www.vupen.com/english/advisories/2011/0832
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66324
- https://exchange.xforce.ibmcloud.com/vulnerabilities/66304
Frequently Asked Questions
What is the severity of CVE-2011-1205?
CVE-2011-1205 has a medium severity rating, indicating potential risks for local privilege escalation.
How do I fix CVE-2011-1205?
To mitigate CVE-2011-1205, it is recommended to update IBM Rational ClearCase or ClearQuest to the latest versions that address this vulnerability.
What software is affected by CVE-2011-1205?
CVE-2011-1205 affects various versions of IBM Rational ClearCase and ClearQuest, specifically 7.0 through 7.1.1.4, along with IBM Rational Common Licensing.
Can CVE-2011-1205 be exploited by remote attackers?
CVE-2011-1205 can only be exploited by local users with access to the system, not remotely.
What types of attacks are possible with CVE-2011-1205?
Attackers can leverage CVE-2011-1205 to perform local privilege escalation through crafted HTML documents.
- agent/references
- agent/softwarecombine
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ibm
- canonical/ibm rational clearquest
- version/ibm rational clearquest/7.0.1.3
- version/ibm rational clearquest/7.0.1.7
- canonical/ibm rational clearcase
- version/ibm rational clearcase/7.0.0.8
- version/ibm rational clearquest/7.0.1.11
- version/ibm rational clearquest/7.0.0.6
- version/ibm rational clearcase/7.0.0.7
- version/ibm rational clearquest/7.0.1.1
- version/ibm rational clearcase/7.0.0.9
- canonical/ibm rational common licensing
- version/ibm rational common licensing/7.1
- version/ibm rational clearcase/7.0.1.4
- version/ibm rational clearquest/7.0.0.9
- version/ibm rational clearcase/7.1.1.3
- version/ibm rational clearcase/7.0.0.6
- version/ibm rational common licensing/7.0.1.1
- version/ibm rational clearquest/7.0.1.8
- version/ibm rational clearcase/7.1.1
- version/ibm rational clearcase/7.0.1.11
- version/ibm rational clearcase/7.0.1.1
- version/ibm rational clearcase/7.0.1.6
- version/ibm rational clearquest/7.1.0.1
- version/ibm rational clearquest/7.0.1.6
- version/ibm rational clearcase/7.0.1.5
- version/ibm rational clearquest/7.1.0.2
- version/ibm rational clearcase/7.0.0.4
- version/ibm rational clearquest/7.0.1.0
- version/ibm rational clearcase/7.1.0.2
- version/ibm rational clearcase/7.0.1.3
- version/ibm rational common licensing/7.1.1.2
- version/ibm rational clearcase/7.1.0.1
- version/ibm rational clearquest/7.0.0.8
- version/ibm rational clearcase/7.0.1.10
- version/ibm rational common licensing/7.1.1.1
- version/ibm rational clearcase/7.0.1.7
- version/ibm rational clearcase/7.0.1.9
- version/ibm rational common licensing/7.1.1.3
- version/ibm rational common licensing/7.0
- version/ibm rational clearcase/7.1.1.1
- version/ibm rational common licensing/7.1.1
- version/ibm rational clearquest/7.1.1.1
- version/ibm rational common licensing/7.0.1
- version/ibm rational common licensing/7.0.0.1
- version/ibm rational clearquest/7.0.1.10
- version/ibm rational clearcase/7.1
- version/ibm rational clearquest/7.1.1.4
- version/ibm rational clearquest/7.1.1.3
- version/ibm rational clearquest/7.0.1.5
- version/ibm rational clearquest/7.1.1.2
- version/ibm rational clearcase/7.0.1.2
- version/ibm rational clearquest/7.0.0.5
- version/ibm rational clearquest/7.0.1
- version/ibm rational clearcase/7.1.1.4
- version/ibm rational clearquest/7.1
- version/ibm rational clearquest/7.0.0.4
- version/ibm rational clearcase/7.0.1
- version/ibm rational common licensing/7.1.0.2
- version/ibm rational clearcase/7.0.1.8
- version/ibm rational common licensing/7.0.3.1
- version/ibm rational clearquest/7.0.1.2
- version/ibm rational common licensing/7.1.1.4
- version/ibm rational common licensing/7.0.0.2
- version/ibm rational clearcase/7.0.0.5
- version/ibm rational clearquest/7.0.0.7
- version/ibm rational common licensing/7.1.0.1
- version/ibm rational clearcase/7.1.1.2
- version/ibm rational clearquest/7.0.1.4
- version/ibm rational clearquest/7.0.1.9