CVE-2011-1653

CRITICAL 10.0CVE-2011-1653 · Published 18/04/2011 · updated 16/06/2026

Package	Affected versions	Patched versions
total defense broadcom	`= r12`	No fix yet

Description

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.

References

secunia.com/advisories/44097 · Vendor Advisory
securityreason.com/securityalert/8403
securitytracker.com/id
securityfocus.com/archive/1/517489/100/0/threaded
securityfocus.com/archive/1/517490/100/0/threaded
securityfocus.com/archive/1/517491/100/0/threaded
securityfocus.com/archive/1/517493/100/0/threaded
securityfocus.com/archive/1/517494/100/0/threaded
securityfocus.com/archive/1/517496/100/0/threaded
securityfocus.com/archive/1/517497/100/0/threaded
securityfocus.com/archive/1/517498/100/0/threaded
securityfocus.com/bid/47355
vupen.com/english/advisories/2011/0977 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-11-128
zerodayinitiative.com/advisories/ZDI-11-129
zerodayinitiative.com/advisories/ZDI-11-130
zerodayinitiative.com/advisories/ZDI-11-131
zerodayinitiative.com/advisories/ZDI-11-132
zerodayinitiative.com/advisories/ZDI-11-133
zerodayinitiative.com/advisories/ZDI-11-134
exchange.xforce.ibmcloud.com/vulnerabilities/66725
support.ca.com/irj/portal/anonymous/phpsupcontent

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free