← back
CVE-2011-4135

CVE-2011-4135

30Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 32%
from disclosure to weapon64 days
Published on NVDJan 19
metasploit+64d
exploitation probability
32%top 2% of all CVEs
observed exploitation
nono source reports it
Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389.
Affected products
n/a · n/a
References
http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1http://secunia.com/advisories/45615http://www.flexerasoftware.com/pl/13057.htmhttp://www.ibm.com/support/docview.wss?uid=swg21577760http://www.securityfocus.com/bid/49191http://www.zerodayinitiative.com/advisories/ZDI-11-272/