CVE-2011-1389

Published: Jan 19, 2012Modified: Apr 29, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple directory traversal vulnerabilities in the vendor daemon in Rational Common Licensing in Telelogic License Server 2.0, Rational License Server 7.x, and ibmratl in IBM Rational License Key Server (RLKS) 8.0 through 8.1.2 allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-4135.

Affected (8)

Products: Ibm: Rational License Key Server, Rational License Server, Telelogic License Server

3 products

Rational License Key Server

Rational License Server

Telelogic License Server

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Ibm Rational License Key Server	Version 8.0
Ibm Rational License Key Server	Version 8.1.1
Ibm Rational License Key Server	Version 8.1.2
Ibm Rational License Key Server	Version 8.1
Ibm Rational License Server	Version 7.0
Ibm Rational License Server	Version 7.1
Ibm Rational License Server	Version 7.5
Ibm Telelogic License Server	Version 2.0

Related CWEs

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (16)

http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1

Source: cve@mitre.org

http://secunia.com/advisories/47522

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/47524

Source: cve@mitre.org

Vendor Advisory

http://www.flexerasoftware.com/pl/13057.htm

Source: cve@mitre.org

http://www.ibm.com/support/docview.wss?uid=swg21577760

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/49191

Source: cve@mitre.org

http://www.zerodayinitiative.com/advisories/ZDI-11-272/

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/71739

Source: cve@mitre.org

http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/47522

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/47524

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.flexerasoftware.com/pl/13057.htm

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.ibm.com/support/docview.wss?uid=swg21577760

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/49191

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-11-272/

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/71739

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.