CVE-2009-0043: Critical severity CA Service Level Management vulnerability
The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Restrict network access to the smmsnmpd service on CA Service Metric Analysis (r11.0 through r11.1 SP1) and CA Service Level Management 3.5 to trusted management hosts or IP ranges using firewall rules, ACLs, or network segmentation; block access from untrusted networks.
Event History
Frequently Asked Questions
What is the severity of CVE-2009-0043?
CVE-2009-0043 is classified as a high severity vulnerability due to its potential to allow remote code execution.
How do I fix CVE-2009-0043?
To remediate CVE-2009-0043, upgrade to the latest version of CA Service Metric Analysis or Service Level Management that addresses this vulnerability.
What software versions are affected by CVE-2009-0043?
CVE-2009-0043 affects CA Service Metric Analysis versions r11.0, r11.1, and r11.1 SP1, as well as CA Service Level Management version 3.5.
What type of attacks can CVE-2009-0043 facilitate?
CVE-2009-0043 can facilitate remote code execution attacks by allowing unauthorized access to the smmsnmpd service.
When was CVE-2009-0043 disclosed?
CVE-2009-0043 was disclosed in January 2009.