PT-2011-2947 · Ibm · Rational Common Licensing+2

Published 2011-03-29 · Updated 2017-08-17 · CVE-2011-1205

Positive Technologies (AI Summary)

CVSS v2.0

6.9

Medium

Base vector

AV:L/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Rational ClearCase versions 7.0.0.4 through 7.1.1.4 IBM Rational ClearQuest versions 7.0.0.4 through 7.1.1.4 Rational Common Licensing versions 7.0 through 7.1.1.4

Description The issue is related to multiple buffer overflows in unspecified COM objects. This can be exploited by local users to gain privileges via a Trojan horse HTML document in the My Computer zone.

Recommendations For IBM Rational ClearCase versions 7.0.0.4 through 7.1.1.4, update to a version outside of the affected range to resolve the issue. For IBM Rational ClearQuest versions 7.0.0.4 through 7.1.1.4, update to a version outside of the affected range to resolve the issue. For Rational Common Licensing versions 7.0 through 7.1.1.4, update to a version outside of the affected range to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-1205

Affected Products

Ibm Rational Clearcase

Ibm Rational Clearquest

Rational Common Licensing

References · 7

• http://ibm.com/support/docview.wss?uid=swg21470998 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1205 · Security Note
• http://vupen.com/english/advisories/2011/0832 · Note
• http://securitytracker.com/id?1025268 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66324 · Note
• http://securitytracker.com/id?1025269 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66304 · Note