NVD

Id
8548  
Name
CVE-2011-1653  
Description
Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-04-18  
Modified Date
2012-02-13  
Seq
2011-1653  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
49171 8548 CVE-2011-1653 8403  View
49172 8548 CVE-2011-1653 1025353  View
49173 8548 CVE-2011-1653 20110413 ZDI-11-130: CA Total Defense Suite UNC Management Console DeleteFilter SQL Injection Vulnerability  View
49174 8548 CVE-2011-1653 20110413 ZDI-11-131: CA Total Defense Suite NonAssignedUserList Stored Procedure SQL Injection Vulnerability  View
49175 8548 CVE-2011-1653 20110413 ZDI-11-128: CA Total Defense Suite UnassignFunctionalUsers Stored Procedure SQL Injection Vulnerability  View
49176 8548 CVE-2011-1653 20110413 ZDI-11-129: CA Total Defense Suite UnassignAdminRoles Stored Procedure SQL Injection Vulnerability  View
49177 8548 CVE-2011-1653 20110413 CA20110413-01: Security Notice for CA Total Defense  View
49178 8548 CVE-2011-1653 20110413 ZDI-11-132: CA Total Defense Suite UNC Management Console DeleteReportLayout SQL Injection Vulnerability  View
49179 8548 CVE-2011-1653 20110413 ZDI-11-133: CA Total Defense Suite UNC Management Console DeleteReports SQL Injection Vulnerability  View
49180 8548 CVE-2011-1653 20110413 ZDI-11-134: CA Total Defense Suite UNC Management Console RegenerateReport SQL Injection Vulnerability  View
49181 8548 CVE-2011-1653 47355  View
49182 8548 CVE-2011-1653 ADV-2011-0977  View
49183 8548 CVE-2011-1653 http://www.zerodayinitiative.com/advisories/ZDI-11-128/  View
49184 8548 CVE-2011-1653 http://www.zerodayinitiative.com/advisories/ZDI-11-129/  View
49185 8548 CVE-2011-1653 http://www.zerodayinitiative.com/advisories/ZDI-11-130/  View
49186 8548 CVE-2011-1653 http://www.zerodayinitiative.com/advisories/ZDI-11-131/  View
49187 8548 CVE-2011-1653 http://www.zerodayinitiative.com/advisories/ZDI-11-132/  View
49188 8548 CVE-2011-1653 http://www.zerodayinitiative.com/advisories/ZDI-11-133/  View
49189 8548 CVE-2011-1653 http://www.zerodayinitiative.com/advisories/ZDI-11-134/  View
49190 8548 CVE-2011-1653 totaldefense-multiple-sql-injection(66725)  View
49191 8548 CVE-2011-1653 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={CD065CEC-AFE2-4D9D-8E0B-BE7F6E345866}  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34219 JVNDB-2011-004461 CA TD の UNC Server における SQL インジェクションの脆弱性 CA Total Defense の Unified Network Control Server には、SQL インジェクションの脆弱性が存在します。 CVE-2011-1653 49560 CVE-2011-1653 8548 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004461.html 2011-04-13 2012-03-27 View