PT-2011-3267 · Ca · Ca Total Defense

Andrea Micalizzi + 1 · Published 2011-04-13 · Updated 2021-04-12 · CVE-2011-1653

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA Total Defense versions prior to r12 SE2

Description The issue involves multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server. These vulnerabilities allow remote attackers to execute arbitrary SQL commands via various vectors, including the UnAssignFunctionalRoles, UnassignAdminRoles, DeleteFilter, NonAssignedUserList, DeleteReportLayout, DeleteReports, and RegenerateReport stored procedures.

Recommendations For versions prior to r12 SE2, update to r12 SE2 or later to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable stored procedures until a patch is available. Avoid using the vulnerable stored procedures in the UNC Management Console until the issue is resolved.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2011-1653

ZDI-11-128

ZDI-11-129

ZDI-11-130

ZDI-11-131

ZDI-11-132

ZDI-11-133

ZDI-11-134

Affected Products

Ca Total Defense

References · 32

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ca_totaldefense_regeneratereports.rb · Exploit
• 🔥 https://exploit-db.com/exploits/17922 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-11-132 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-133 · Security Note
• http://secunia.com/advisories/44097 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1653 · Security Note
• http://vupen.com/english/advisories/2011/0977 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-11-134 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-131 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-128 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-129 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-11-130 · Security Note
• http://securitytracker.com/id?1025353 · Note
• http://zerodayinitiative.com/advisories/ZDI-11-130 · Note
• http://zerodayinitiative.com/advisories/ZDI-11-128 · Note