{"schemaVersion":3,"id":"CVE-2011-4135","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"Multiple directory traversal vulnerabilities in lmgrd in Flexera FlexNet Publisher 11.10 (aka FlexNet License Server Manager) allow remote attackers to execute arbitrary code via vectors related to save, rename, and load operations on log files.  NOTE: this might overlap CVE-2011-1389.","dates":{"published":"2012-01-19T19:00:00.000Z","modified":"2024-09-16T20:47:46.112Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.30166,"percentile":0.98209,"severity":"high","asOf":"2026-10-19T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-19T00:00:00.000Z","baselineScore":0.30166},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.30166,"percentile":0.98209}],"last30":[{"date":"2026-09-19T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.30166,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.30166,"percentile":0.98209}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"MSF_EXPLOIT_WINDOWS_LICENSE_FLEXNET_LMGRD_BOF","name":"FlexNet License Server Manager lmgrd Buffer Overflow","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/license/flexnet_lmgrd_bof.rb","maturity":"poc","reliabilityScore":0.5,"verified":false,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/license/flexnet_lmgrd_bof","rank":"300","rankName":"normal","postAuth":false,"check":false,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":1,"weaknesses":[{"id":"CWE-22","name":"Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')","description":"The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.","type":"weakness","status":"Stable","abstraction":"Base","likelihoodOfExploit":"High","url":"https://cwe.mitre.org/data/definitions/22.html"}],"affected":[{"vendor":"flexerasoftware","product":"flexnet_publisher","name":"flexnet publisher","label":"flexnet_publisher","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"11.10","noFixRecorded":false,"fixedIn":null}],"versionsText":"11.10","eol":null,"hubHref":"/vendor/flexerasoftware/flexnet_publisher"}],"affectedCount":1,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://secunia.com/advisories/45615","label":"secunia.com/advisories/45615","hostname":"secunia.com","tags":["Third Party Advisory","X Refsource SECUNIA","Vendor Advisory"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-11-272/","label":"www.zerodayinitiative.com/advisories/ZDI-11-272/","hostname":"www.zerodayinitiative.com","tags":["X Refsource MISC"]},{"url":"http://www.securityfocus.com/bid/49191","label":"www.securityfocus.com/bid/49191","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID"]},{"url":"http://www.flexerasoftware.com/pl/13057.htm","label":"www.flexerasoftware.com/pl/13057.htm","hostname":"www.flexerasoftware.com","tags":["X Refsource CONFIRM","Patch","Vendor Advisory"]},{"url":"http://www.ibm.com/support/docview.wss?uid=swg21577760","label":"www.ibm.com/support/docview.wss?uid=swg21577760","hostname":"www.ibm.com","tags":["X Refsource MISC"]},{"url":"http://kb.flexerasoftware.com/selfservice/microsites/search.do?cmd=displayKC&docType=kc&externalId=Q200975&sliceId=1","label":"kb.flexerasoftware.com/selfservice/…","hostname":"kb.flexerasoftware.com","tags":["X Refsource CONFIRM","Vendor Advisory"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2012-01-19T19:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-09-16T20:47:46.112Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T08:19:20.193Z","stale":false,"partial":false}}