CVE-2011-1389 Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Ser...
HighCVSS 10.0
EPSS 6.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-4135.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm rational license key server | = 8.0 | No fix listed |
| ibm rational license key server | = 8.1 | No fix listed |
| ibm rational license key server | = 8.1.1 | No fix listed |
| ibm rational license key server | = 8.1.2 | No fix listed |
| ibm rational license server | = 7.0 | No fix listed |
| ibm rational license server | = 7.1 | No fix listed |
| ibm rational license server | = 7.5 | No fix listed |
| ibm telelogic license server | = 2.0 | No fix listed |
References
- kb.flexerasoftware.com
- 47522 third-party-advisory vendor-advisory
- 47524 third-party-advisory vendor-advisory
- www.flexerasoftware.com
- www.ibm.com patch vendor-advisory
- 49191 vdb-entry
- www.zerodayinitiative.com
- rlc-logfiles-code-execution(71739) vdb-entry