KLA10163 ACE vulnerability in FlexNet Publishier

Multiple critical vulnerabilities have been found in FlexNet Publisher. Malicious users can exploit these vulnerabilities to execute arbitrary code. Below is a complete list of vulnerabilities

1. A buffer overflow can be exploited remotely via a specially designed packet.
2. Directory traversal vulnerabilities can be exploited remotely via vectors related to log files.

Original advisories

Related products

FlexNet-Publisher

CVE list

CVE-2011-4135 critical

CVE-2011-4134 critical

Solution

Update to latest version

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

Affected Products

• Flexera FlexNet Publisher version 11.10