CVE:CVE-2011-1389
CNNVD:CNNVD-201202-230
IBM Rational License Key Server (RLKS) 8.0至8.1.2版本中的Telelogic License Server 2.0, Rational License Server 7.x版本和ibmratl中的Rational Common Licensing的vendor daemon中存在多个目录遍历漏洞。远程攻击者可利用该漏洞借助与在日志文件上保存，重命名和加载操作相关的向量执行任意代码。
solution:Upgrade ibm rational_license_key_server to a higher version than 8.0,8.1,8.1.1,8.1.2,and avoid the version 8.0,8.1,8.1.1,8.1.2; Upgrade ibm rational_license_server to a higher version than 7.0,7.1,7.5,and avoid the version 7.0,7.1,7.5; Upgrade ibm telelogic_license_server to a higher version than 2.0,and avoid the version 2.0