CVE-2011-1654

HIGH 7.5CVE-2011-1654 · Published 18/04/2011 · updated 16/06/2026

In short

CVE-2011-1654 is a HIGH (CVSS 7.5) vulnerability affecting total defense (broadcom).
Chance of exploitation in the next 30 days (EPSS): 11.4%, higher than 96.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
total defense broadcom	`= r12`	No fix yet

Description

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx.

References

secunia.com/advisories/44097 · Vendor Advisory
securitytracker.com/id
securityfocus.com/archive/1/517488/100/0/threaded
securityfocus.com/archive/1/517494/100/0/threaded
securityfocus.com/bid/47357
vupen.com/english/advisories/2011/0977 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-11-126
exchange.xforce.ibmcloud.com/vulnerabilities/66726
support.ca.com/irj/portal/anonymous/phpsupcontent

More vulnerabilities in total defense

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free