PT-2011-2947 · Ibm · Rational Common Licensing+2

Publicado 2011-03-29 · Atualizado 2017-08-17 · CVE-2011-1205

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Média

Vetor base

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Rational ClearCase versions 7.0.0.4 through 7.1.1.4 IBM Rational ClearQuest versions 7.0.0.4 through 7.1.1.4 Rational Common Licensing versions 7.0 through 7.1.1.4

Description The issue is related to multiple buffer overflows in unspecified COM objects. This can be exploited by local users to gain privileges via a Trojan horse HTML document in the My Computer zone.

Recommendations For IBM Rational ClearCase versions 7.0.0.4 through 7.1.1.4, update to a version outside of the affected range to resolve the issue. For IBM Rational ClearQuest versions 7.0.0.4 through 7.1.1.4, update to a version outside of the affected range to resolve the issue. For Rational Common Licensing versions 7.0 through 7.1.1.4, update to a version outside of the affected range to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2011-1205

Produtos afetados

Ibm Rational Clearcase

Ibm Rational Clearquest

Rational Common Licensing

Referências · 7

• http://vupen.com/english/advisories/2011/0832 · Nota
• http://securitytracker.com/id?1025268 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66324 · Nota
• http://ibm.com/support/docview.wss?uid=swg21470998 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-1205 · Nota de Segurança
• http://securitytracker.com/id?1025269 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66304 · Nota