CVE-2009-0043
First published: Thu Jan 08 2009(Updated: )
The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Broadcom Unicenter Service Metric Analysis | =r11.1 | |
| Broadcom Unicenter Service Metric Analysis | =r11.0 | |
| Broadcom Unicenter Service Metric Analysis | =r11.1-sp1 | |
| Broadcom CA Service Level Management | =3.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/33161
- http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148
- http://securityreason.com/securityalert/4887
- http://www.vupen.com/english/advisories/2009/0053
- http://www.securityfocus.com/archive/1/499857/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2009-0043?
CVE-2009-0043 is classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2009-0043?
To remediate CVE-2009-0043, upgrade to the latest version of CA Service Metric Analysis or Service Level Management that addresses this vulnerability.
What software versions are affected by CVE-2009-0043?
CVE-2009-0043 affects CA Service Metric Analysis versions r11.0, r11.1, and r11.1 SP1, as well as CA Service Level Management version 3.5.
What type of attacks can CVE-2009-0043 facilitate?
CVE-2009-0043 can facilitate remote code execution attacks by allowing unauthorized access to the smmsnmpd service.
When was CVE-2009-0043 disclosed?
CVE-2009-0043 was disclosed in January 2009.
- agent/references
- agent/type
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/author
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/ca
- canonical/broadcom unicenter service metric analysis
- version/broadcom unicenter service metric analysis/r11.1
- version/broadcom unicenter service metric analysis/r11.0
- version/broadcom unicenter service metric analysis/r11.1-sp1
- canonical/broadcom ca service level management
- version/broadcom ca service level management/3.5