CVE-2009-0043
high · 10The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.
10
CVSS
53.3%
EPSS (exploit prob.)
99th
EPSS percentile
2009-01-08
Published
AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| ca | service_level_management | 3.5 |
| ca | service_metric_analysis | r11.0 |
| ca | service_metric_analysis | r11.1 |
| ca | service_metric_analysis | r11.1 |
Check a specific version with /api/v1/cve/match.
References
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx
- http://securityreason.com/securityalert/4887
- http://www.securityfocus.com/archive/1/499857/100/0/threaded
- http://www.securityfocus.com/bid/33161
- http://www.vupen.com/english/advisories/2009/0053
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx
- http://securityreason.com/securityalert/4887
- http://www.securityfocus.com/archive/1/499857/100/0/threaded
- http://www.securityfocus.com/bid/33161
- http://www.vupen.com/english/advisories/2009/0053
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2009-0043