cnvd-2018-12134
Vulnerability from cnvd
Title
Flexera Software FlexNet Publisher Licensing Service任意代码执行漏洞
Description
Flexera Software FlexNet Publisher（前称FLEXlm）是美国富莱睿（Flexera Software）公司的一款授权关系管理解决方案（Entitlement Relationship Management Solution）中的软件授权管理核心组件。FlexNet Publisher Licensing Service是一个软件许可码激活验证的服务。 基于Windows平台的Flexera Software FlexNet Publisher Luton SP1 (11.14.1.1)版本中的FlexNet Publisher Licensing Service中存在安全漏洞。攻击者可利用该漏洞以系统权限执行任意代码。
Severity
高
Patch Name
Flexera Software FlexNet Publisher Licensing Service任意代码执行漏洞的补丁
Patch Description
Flexera Software FlexNet Publisher（前称FLEXlm）是美国富莱睿（Flexera Software）公司的一款授权关系管理解决方案（Entitlement Relationship Management Solution）中的软件授权管理核心组件。FlexNet Publisher Licensing Service是一个软件许可码激活验证的服务。 基于Windows平台的Flexera Software FlexNet Publisher Luton SP1 (11.14.1.1)版本中的FlexNet Publisher Licensing Service中存在安全漏洞。攻击者可利用该漏洞以系统权限执行任意代码。 目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已发布升级补丁以修复漏洞，详情请关注厂商主页： https://www.flexerasoftware.com/

Reference
https://secuniaresearch.flexerasoftware.com/advisories/76368/
Impacted products
Name
Flexera Software FlexNet Publisher 11.14.1
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2016-10395"
    }
  },
  "description": "Flexera Software FlexNet Publisher\uff08\u524d\u79f0FLEXlm\uff09\u662f\u7f8e\u56fd\u5bcc\u83b1\u777f\uff08Flexera Software\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u6388\u6743\u5173\u7cfb\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\uff08Entitlement Relationship Management Solution\uff09\u4e2d\u7684\u8f6f\u4ef6\u6388\u6743\u7ba1\u7406\u6838\u5fc3\u7ec4\u4ef6\u3002FlexNet Publisher Licensing Service\u662f\u4e00\u4e2a\u8f6f\u4ef6\u8bb8\u53ef\u7801\u6fc0\u6d3b\u9a8c\u8bc1\u7684\u670d\u52a1\u3002\r\n\r\n\u57fa\u4e8eWindows\u5e73\u53f0\u7684Flexera Software FlexNet Publisher Luton SP1 (11.14.1.1)\u7248\u672c\u4e2d\u7684FlexNet Publisher Licensing Service\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5\u7cfb\u7edf\u6743\u9650\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "discovererName": "Schneider Electric",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8be6\u60c5\u8bf7\u5173\u6ce8\u5382\u5546\u4e3b\u9875\uff1a\r\nhttps://www.flexerasoftware.com/",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2018-12134",
  "openTime": "2018-06-27",
  "patchDescription": "Flexera Software FlexNet Publisher\uff08\u524d\u79f0FLEXlm\uff09\u662f\u7f8e\u56fd\u5bcc\u83b1\u777f\uff08Flexera Software\uff09\u516c\u53f8\u7684\u4e00\u6b3e\u6388\u6743\u5173\u7cfb\u7ba1\u7406\u89e3\u51b3\u65b9\u6848\uff08Entitlement Relationship Management Solution\uff09\u4e2d\u7684\u8f6f\u4ef6\u6388\u6743\u7ba1\u7406\u6838\u5fc3\u7ec4\u4ef6\u3002FlexNet Publisher Licensing Service\u662f\u4e00\u4e2a\u8f6f\u4ef6\u8bb8\u53ef\u7801\u6fc0\u6d3b\u9a8c\u8bc1\u7684\u670d\u52a1\u3002\r\n\r\n\u57fa\u4e8eWindows\u5e73\u53f0\u7684Flexera Software FlexNet Publisher Luton SP1 (11.14.1.1)\u7248\u672c\u4e2d\u7684FlexNet Publisher Licensing Service\u4e2d\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u5229\u7528\u8be5\u6f0f\u6d1e\u4ee5\u7cfb\u7edf\u6743\u9650\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002 \u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Flexera Software FlexNet Publisher Licensing Service\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Flexera Software FlexNet Publisher 11.14.1"
  },
  "referenceLink": "https://secuniaresearch.flexerasoftware.com/advisories/76368/",
  "serverity": "\u9ad8",
  "submitTime": "2018-06-07",
  "title": "Flexera Software FlexNet Publisher Licensing Service\u4efb\u610f\u4ee3\u7801\u6267\u884c\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.