NVD

Id
8333  
Name
CVE-2011-1389  
Description
Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-4135.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2012-01-19  
Modified Date
2012-01-23  
Seq
2011-1389  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
47748 8333 CVE-2011-1389 http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1  View
47749 8333 CVE-2011-1389 http://www.flexerasoftware.com/pl/13057.htm  View
47750 8333 CVE-2011-1389 http://www.ibm.com/support/docview.wss?uid=swg21577760  View
47751 8333 CVE-2011-1389 49191  View
47752 8333 CVE-2011-1389 http://www.zerodayinitiative.com/advisories/ZDI-11-272/  View
47753 8333 CVE-2011-1389 rlc-logfiles-code-execution(71739)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
25457 JVNDB-2012-001164 IBM Rational License Key Server その他の製品におけるディレクトリトラバーサルの脆弱性 IBM の Telelogic License Server の Rational Common Licensing 内の vendor デーモン、Rational License Server、および Rational License Key Server (RLKS) の ibmratl には、ログファイルの保存、名称変更、およびロード操作に関する処理に不備があるため、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2011-1389 49296 CVE-2011-1389 8333 10 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001164.html 2012-01-19 2012-01-24 View