CVEvulnerability
CVE-2009-0043
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-01-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected configurations
• ca service level management 3.5
• ca service metric analysis r11.0
• ca service metric analysis r11.1
Related
Weakness · not in database (1)
References
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx Vendor Advisory
- http://securityreason.com/securityalert/4887 securityreason.com
- http://www.securityfocus.com/archive/1/499857/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33161 Patch
- http://www.vupen.com/english/advisories/2009/0053 www.vupen.com
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148 Patch
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx Vendor Advisory
- http://securityreason.com/securityalert/4887 securityreason.com
- http://www.securityfocus.com/archive/1/499857/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/33161 Patch
- http://www.vupen.com/english/advisories/2009/0053 www.vupen.com
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148 Patch