National Cyber Awareness System

Vulnerability Summary for CVE-2011-1389

Overview

Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-4135.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://www.ibm.com/support/docview.wss?uid=swg21577760

Type: Advisory; Patch Information

Hyperlink:http://www.ibm.com/support/docview.wss?uid=swg21577760

External Source: XF

Name: rlc-logfiles-code-execution(71739)

Hyperlink:http://xforce.iss.net/xforce/xfdb/71739

External Source: MISC

Name: http://www.zerodayinitiative.com/advisories/ZDI-11-272/

Hyperlink:http://www.zerodayinitiative.com/advisories/ZDI-11-272/

External Source: BID

Name: 49191

Hyperlink:http://www.securityfocus.com/bid/49191

External Source: MISC

Name: http://www.flexerasoftware.com/pl/13057.htm

Hyperlink:http://www.flexerasoftware.com/pl/13057.htm

External Source: SECUNIA

Name: 47524

Type: Advisory

Hyperlink:http://secunia.com/advisories/47524

External Source: SECUNIA

Name: 47522

Type: Advisory

Hyperlink:http://secunia.com/advisories/47522

External Source: MISC

Name: http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1

Hyperlink:http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1