CVE-2011-4135: Path Traversal
Published Jan 19, 2012
·Updated
Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389.
Affected Software
1 affected component
Flexerasoftware Flexnet Publisher=11.10
Remediation
Patch Available
Event History
Jan 19, 2012
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4135?
The severity of CVE-2011-4135 is considered high due to its potential for remote code execution.
2
How do I fix CVE-2011-4135?
To fix CVE-2011-4135, upgrade to a patched version of FlexNet Publisher beyond 11.10.
3
What types of attacks are possible with CVE-2011-4135?
CVE-2011-4135 allows remote attackers to exploit directory traversal vulnerabilities to execute arbitrary code.
4
Which version of FlexNet Publisher is affected by CVE-2011-4135?
FlexNet Publisher version 11.10 is affected by CVE-2011-4135.
5
Can CVE-2011-4135 be exploited without authentication?
Yes, CVE-2011-4135 can be exploited by remote attackers without requiring authentication.