CVE-2011-4135

Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

30.17% chance of exploitation in the next 30 days, 98th percentile

Published

2012-01-19

Updated

2024-09-16

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/license/flexnet_lmgrd_bo…

Security advisories

• http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&e…
• http://secunia.com/advisories/45615
• http://www.flexerasoftware.com/pl/13057.htm
• http://www.securityfocus.com/bid/49191

References

• CVE Record
• NVD entry