CVE-2011-1389: Path Traversal
First published: Thu Jan 19 2012(Updated: )
Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-4135.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ibm Rational License Server | =7.1 | |
| Ibm Rational License Server | =7.0 | |
| IBM Rational License Key Server | =8.1 | |
| Ibm Rational License Server | =7.5 | |
| IBM Rational License Key Server | =8.1.1 | |
| Ibm Telelogic License Server | =2.0 | |
| IBM Rational License Key Server | =8.0 | |
| IBM Rational License Key Server | =8.1.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/47522
- http://secunia.com/advisories/47524
- http://www.ibm.com/support/docview.wss?uid=swg21577760
- http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1
- http://www.flexerasoftware.com/pl/13057.htm
- http://www.zerodayinitiative.com/advisories/ZDI-11-272/
- http://www.securityfocus.com/bid/49191
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71739
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/weakness
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/remedy
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/ibm
- canonical/ibm rational license server
- version/ibm rational license server/7.1
- version/ibm rational license server/7.0
- canonical/ibm rational license key server
- version/ibm rational license key server/8.1
- version/ibm rational license server/7.5
- version/ibm rational license key server/8.1.1
- canonical/ibm telelogic license server
- version/ibm telelogic license server/2.0
- version/ibm rational license key server/8.0
- version/ibm rational license key server/8.1.2