PT-2009-2751 · Ca · Ca Service Metric Analysis+1

Michel Arboi · Publicado 2009-01-08 · Atualizado 2018-10-11 · CVE-2009-0043

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA Service Metric Analysis versions r11.0 through r11.1 SP1 CA Service Level Management version 3.5

Description The issue is related to the smmsnmpd service, which does not properly restrict access. This allows remote attackers to execute arbitrary commands.

Recommendations For CA Service Metric Analysis versions r11.0 through r11.1 SP1, update to a version that properly restricts access to the smmsnmpd service. For CA Service Level Management version 3.5, update to a version that properly restricts access to the smmsnmpd service. As a temporary workaround, consider restricting access to the smmsnmpd service until a patch is available.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-0043

Produtos afetados

Ca Service Level Management

Ca Service Metric Analysis

Referências · 8

• 🔥 https://exploit-db.com/exploits/32711 · Exploit
• http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx · Aviso do Fabricante
• http://securityfocus.com/archive/1/499857/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0043 · Nota de Segurança
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148 · Correção
• http://vupen.com/english/advisories/2009/0053 · Nota
• http://securityreason.com/securityalert/4887 · Nota
• http://securityfocus.com/bid/33161 · Correção