Lucene search

MitreCVE-2011-1654

HistoryApr 18, 2011 - 3:00 p.m.

CVE-2011-1654

2011-04-1815:00:43

CWE-22

mitre

web.nvd.nist.gov

cve-2011-1654

directory traversal

ca total defense

remote code execution

vulnerability

nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.106

Percentile

95.1%

JSON

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx.

Affected configurations

Nvd

Node

broadcomtotal_defenseMatchr12

VendorProductVersionCPE
broadcomtotal_defenser12cpe:2.3:a:broadcom:total_defense:r12:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	total_defense	r12	cpe:2.3:a:broadcom:total_defense:r12:::::::*

References

secunia.com/advisories/44097

securitytracker.com/id?1025353

www.securityfocus.com/archive/1/517488/100/0/threaded

www.securityfocus.com/archive/1/517494/100/0/threaded

www.securityfocus.com/bid/47357

www.vupen.com/english/advisories/2011/0977

www.zerodayinitiative.com/advisories/ZDI-11-126/

exchange.xforce.ibmcloud.com/vulnerabilities/66726

support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D

Social References

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.9

Confidence

Low

EPSS

0.106

Percentile

95.1%

JSON

Related for CVE-2011-1654