CVE-2011-4135

CRITICAL 10.0CVE-2011-4135 · Published 19/01/2012 · updated 16/06/2026

Package	Affected versions	Patched versions
flexnet publisher flexerasoftware	`= 11.10`	No fix yet

Description

Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files. NOTE: this might overlap CVE-2011-1389.

References

kb.flexerasoftware.com/selfservice/microsites/search.do · Vendor Advisory
secunia.com/advisories/45615 · Vendor Advisory
flexerasoftware.com/pl/13057.htm · Patch
ibm.com/support/docview.wss
securityfocus.com/bid/49191
zerodayinitiative.com/advisories/ZDI-11-272

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free