CVE-2011-4135: Path Traversal
First published: Thu Jan 19 2012(Updated: )
Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Flexera FlexNet Publisher | =11.10 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/49191
- http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1
- http://www.ibm.com/support/docview.wss?uid=swg21577760
- http://secunia.com/advisories/45615
- http://www.zerodayinitiative.com/advisories/ZDI-11-272/
- http://www.flexerasoftware.com/pl/13057.htm
Frequently Asked Questions
What is the severity of CVE-2011-4135?
The severity of CVE-2011-4135 is considered high due to its potential for remote code execution.
How do I fix CVE-2011-4135?
To fix CVE-2011-4135, upgrade to a patched version of FlexNet Publisher beyond 11.10.
What types of attacks are possible with CVE-2011-4135?
CVE-2011-4135 allows remote attackers to exploit directory traversal vulnerabilities to execute arbitrary code.
Which version of FlexNet Publisher is affected by CVE-2011-4135?
FlexNet Publisher version 11.10 is affected by CVE-2011-4135.
Can CVE-2011-4135 be exploited without authentication?
Yes, CVE-2011-4135 can be exploited by remote attackers without requiring authentication.
- agent/references
- agent/type
- agent/softwarecombine
- agent/severity
- agent/author
- agent/remedy
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/flexerasoftware
- canonical/flexera flexnet publisher
- version/flexera flexnet publisher/11.10