Arbitrary file creation and program execution using FLEXlm LicenseManager, from versions 4.0 to 5.0, in IRIX.
CVSS 2.0
Severity: HIGH
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| sgi | irix | 4.0.1 |
| sgi | irix | 4.0.5h |
| sgi | irix | 3.3.2 |
| sgi | irix | 4.0.5e |
| sun | sunos | 5.5 |
| sgi | irix | 4.0.5_iop |
| sgi | irix | 6.4 |
| sgi | irix | 4.0.5f |
| sgi | irix | 4.0.1t |
| sgi | irix | 4.0.5d |
| sgi | irix | 5.1 |
| sgi | license_oeo | 3.1.1 |
| sun | sunos | 5.4 |
| sgi | irix | 4.0.4 |
| sgi | irix | 4.0.5a |
| sgi | irix | 4.0.5 |
| sgi | irix | 4.0.5_ipr |
| sgi | irix | 4.0.3 |
| sgi | irix | 4.0.4b |
| sun | sunos | 4.1.1 |
| sun | sunos | 4.1.4 |
| sgi | irix | 3.3.3 |
| sgi | license_oeo | 3.0 |
| sgi | irix | 5.0.1 |
| sun | sunos | 4.1.3 |
| sgi | irix | 5.0 |
| sun | solaris | 2.4 |
| sun | solaris | 2.5 |
| sun | solaris | 2.5.1 |
| sun | sunos | 4.1.4jl |
| sgi | irix | 4.0.5g |
| sgi | irix | 4.0 |
| globetrotter | flexlm | 4.1 |
| sgi | irix | 5.3 |
| sun | sunos | 5.5.1 |
| sun | sunos | 4.1.3u1 |
| sgi | irix | 6.0 |
| sgi | irix | 4.0.2 |
| sgi | irix | 5.2 |
| globetrotter | flexlm | 5.0 |
| sgi | irix | 6.3 |
| globetrotter | flexlm | 4.0 |
| sun | sunos | 4.1.2 |
| sgi | irix | 4.0.4t |
| sgi | irix | 5.1.1 |
| sgi | irix | 6.2 |
| sgi | irix | 6.0.1 |
| sgi | license_oeo | 3.1 |
| sgi | irix | 6.1 |
The default configuration of FLEXlm license manager 6.0d, and possibly other versions, allows remote attackers to shut down the server via the lmdown command.
CVSS 2.0
Severity: MEDIUM
Problem Type: NVD-CWE-Other,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| globetrotter | flexlm | 6.0d |