CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability

Title: CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability CA Advisory Reference: CA20090107-01 CA Advisory Date: 2009-01-07 Reported By: Michel Arboi of Tenable Network Security Impact: A remote attacker can execute arbitra...

CVE-2009-0043

The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors...

Design/Logic Flaw

The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors...

CVE-2009-0043

The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors...

多个CA服务管理产品未明远程命令执行漏洞

BUGTRAQ ID: 33161 CVE ID：CVE-2009-0043 CNCVE ID：CNCVE-20090043 CA Service Metric Analysis和CA Service Level Management包含漏洞，允许远程攻击者执行任意命令。 问题是不充分限制对smmsnmpd服务的访问，远程攻击者可以利用漏洞以此服务上下文执行任意命令。 目前没有详细漏洞细节提供。 CA Service Metric Analysis 11.1 SP1 CA Service Metric Analysis 11.1 CA Service Metric Analysis 11...