PT-2009-2751 · Ca · Ca Service Metric Analysis+1

Michel Arboi · Published 2009-01-08 · Updated 2018-10-11 · CVE-2009-0043

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA Service Metric Analysis versions r11.0 through r11.1 SP1 CA Service Level Management version 3.5

Description The issue is related to the smmsnmpd service, which does not properly restrict access. This allows remote attackers to execute arbitrary commands.

Recommendations For CA Service Metric Analysis versions r11.0 through r11.1 SP1, update to a version that properly restricts access to the smmsnmpd service. For CA Service Level Management version 3.5, update to a version that properly restricts access to the smmsnmpd service. As a temporary workaround, consider restricting access to the smmsnmpd service until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2009-0043

Affected Products

Ca Service Level Management

Ca Service Metric Analysis

References · 8

• 🔥 https://exploit-db.com/exploits/32711 · Exploit
• http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0043 · Security Note
• https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148 · Patch
• http://securityfocus.com/bid/33161 · Patch
• http://securityfocus.com/archive/1/499857/100/0/threaded · Note
• http://vupen.com/english/advisories/2009/0053 · Note
• http://securityreason.com/securityalert/4887 · Note