NVD

Id
8550  
Name
CVE-2011-1655  
Description
The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database credentials, and subsequently execute arbitrary code, by sniffing the network, related to the UNCWS Web Service.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-04-18  
Modified Date
2011-04-20  
Seq
2011-1655  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
49200 8550 CVE-2011-1655 1025353  View
49201 8550 CVE-2011-1655 20110413 ZDI-11-127: CA Total Defense Suite UNCWS Web Service getDBConfigSettings Credential Disclosure Vulnerability  View
49202 8550 CVE-2011-1655 20110413 CA20110413-01: Security Notice for CA Total Defense  View
49203 8550 CVE-2011-1655 47356  View
49204 8550 CVE-2011-1655 ADV-2011-0977  View
49205 8550 CVE-2011-1655 http://www.zerodayinitiative.com/advisories/ZDI-11-127/  View
49206 8550 CVE-2011-1655 totaldefense-uncsw-code-execution(66727)  View
49207 8550 CVE-2011-1655 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={CD065CEC-AFE2-4D9D-8E0B-BE7F6E345866}  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34221 JVNDB-2011-004463 CA TD の UNC Server の management.asmx モジュールにおけるデータベース資格情報を取得される脆弱性 CA Total Defense (TD) の Unified Network Control (UNC) Server の Management Web Service の management.asmx モジュールは、getDBConfigSettings リクエストへの平文レスポンスを送信するため、データベース資格情報を取得される、およびその後に任意のコードを実行される脆弱性が存在します。 CVE-2011-1655 49562 CVE-2011-1655 8550 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004463.html 2011-04-13 2012-03-27 View