CVE-2011-5157: Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privil

Routine

MEDIUM 6.9DOWNGRADEDOWNGRADEDOWNGRADE

CVE-2011-5157 is a medium-severity flaw (CVSS 6.9) affecting reflection for hp, reflection for ibm, reflection for regis graphics server. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. NOTE: some of these details are obtained from third party information.

Why this priority

No elevated risk signals yet

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	6.9 (Medium)
EPSS exploit chance	0.4% (top 65%)
CISA exploited list	No
Published	2012-09-06
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: attachmate

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2012-09-06 10:41 UTCPublished CVE record published
2026-06-16 23:36 UTCUpdated Record last modified

attachmate reflection for hp DOWNGRADE

Affected: 14.0 · 14.1 sp1

Fixed in: no fixed release known

Safe to downgrade to: a release before 14.0

1. Check installed version

apt-cache policy reflection-for-hp || rpm -q reflection-for-hp || reflection-for-hp --version

2. No fixed release: DOWNGRADE to a release before 14.0 (Debian / Ubuntu)

apt-cache madison reflection-for-hp sudo apt install reflection-for-hp=<VERSION_BEFORE_14.0> sudo apt-mark hold reflection-for-hp

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list reflection-for-hp sudo dnf downgrade reflection-for-hp-<VERSION_BEFORE_14.0> sudo dnf versionlock add reflection-for-hp

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

attachmate reflection for ibm DOWNGRADE

Affected: 14.0 · 14.1 sp1

Fixed in: no fixed release known

Safe to downgrade to: a release before 14.0

1. Check installed version

apt-cache policy reflection-for-ibm || rpm -q reflection-for-ibm || reflection-for-ibm --version

2. No fixed release: DOWNGRADE to a release before 14.0 (Debian / Ubuntu)

apt-cache madison reflection-for-ibm sudo apt install reflection-for-ibm=<VERSION_BEFORE_14.0> sudo apt-mark hold reflection-for-ibm

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list reflection-for-ibm sudo dnf downgrade reflection-for-ibm-<VERSION_BEFORE_14.0> sudo dnf versionlock add reflection-for-ibm

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

attachmate reflection for regis graphics server DOWNGRADE

Affected: 14.0 · 14.1 sp1

Fixed in: no fixed release known

Safe to downgrade to: a release before 14.0

1. Check installed version

apt-cache policy reflection-for-regis-graphics-server || rpm -q reflection-for-regis-graphics-server || reflection-for-regis-graphics-server --version

2. No fixed release: DOWNGRADE to a release before 14.0 (Debian / Ubuntu)

apt-cache madison reflection-for-regis-graphics-server sudo apt install reflection-for-regis-graphics-server=<VERSION_BEFORE_14.0> sudo apt-mark hold reflection-for-regis-graphics-server

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list reflection-for-regis-graphics-server sudo dnf downgrade reflection-for-regis-graphics-server-<VERSION_BEFORE_14.0> sudo dnf versionlock add reflection-for-regis-graphics-server

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

attachmate reflection for unix and openvms DOWNGRADE

Affected: 14.0 · 14.1 sp1

Fixed in: no fixed release known

Safe to downgrade to: a release before 14.0

1. Check installed version

apt-cache policy reflection-for-unix-and-openvms || rpm -q reflection-for-unix-and-openvms || reflection-for-unix-and-openvms --version

2. No fixed release: DOWNGRADE to a release before 14.0 (Debian / Ubuntu)

apt-cache madison reflection-for-unix-and-openvms sudo apt install reflection-for-unix-and-openvms=<VERSION_BEFORE_14.0> sudo apt-mark hold reflection-for-unix-and-openvms

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list reflection-for-unix-and-openvms sudo dnf downgrade reflection-for-unix-and-openvms-<VERSION_BEFORE_14.0> sudo dnf versionlock add reflection-for-unix-and-openvms

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

attachmate reflection x DOWNGRADE

Affected: 14.0 · 14.1 sp1

Fixed in: no fixed release known

Safe to downgrade to: a release before 14.0

1. Check installed version

apt-cache policy reflection-x || rpm -q reflection-x || reflection-x --version

2. No fixed release: DOWNGRADE to a release before 14.0 (Debian / Ubuntu)

apt-cache madison reflection-x sudo apt install reflection-x=<VERSION_BEFORE_14.0> sudo apt-mark hold reflection-x

2. No fixed release: DOWNGRADE (RHEL / Amazon Linux / Fedora)

dnf --showduplicates list reflection-x sudo dnf downgrade reflection-x-<VERSION_BEFORE_14.0> sudo dnf versionlock add reflection-x

Downgrade risk

Downgrading can break dependent software and may reopen older bugs. Read the distro advisory first and test on a non-production host.

After downgrade

Restart the service, and keep the package held until a fixed release ships.

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2011-5157?

reflection for hp: downgrade or apply the listed mitigation; reflection for ibm: downgrade or apply the listed mitigation; reflection for regis graphics server: downgrade or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2011-5157 being exploited?

CVE-2011-5157 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2011-5157 affect?

CVE-2011-5157 affects reflection for hp, reflection for ibm, reflection for regis graphics server. Severity is medium (CVSS 6.9). Untrusted search path vulnerability in Attachmate Reflection before 14.1 SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, a related issue to CVE-2011-0107. NOTE: some of these details are ob

How urgent is CVE-2011-5157?

Priority 33/100. No elevated risk signals yet.

References

← Back to latest CVEs