CVE-2011-1653

緊急 10.0CVE-2011-1653 · 18/04/2011 公開 · 16/06/2026 更新

パッケージ	影響を受けるバージョン	修正済みバージョン
total defense broadcom	`= r12`	修正版なし

概要

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.

参考情報

secunia.com/advisories/44097 · Vendor Advisory
securityreason.com/securityalert/8403
securitytracker.com/id
securityfocus.com/archive/1/517489/100/0/threaded
securityfocus.com/archive/1/517490/100/0/threaded
securityfocus.com/archive/1/517491/100/0/threaded
securityfocus.com/archive/1/517493/100/0/threaded
securityfocus.com/archive/1/517494/100/0/threaded
securityfocus.com/archive/1/517496/100/0/threaded
securityfocus.com/archive/1/517497/100/0/threaded
securityfocus.com/archive/1/517498/100/0/threaded
securityfocus.com/bid/47355
vupen.com/english/advisories/2011/0977 · Vendor Advisory
zerodayinitiative.com/advisories/ZDI-11-128
zerodayinitiative.com/advisories/ZDI-11-129
zerodayinitiative.com/advisories/ZDI-11-130
zerodayinitiative.com/advisories/ZDI-11-131
zerodayinitiative.com/advisories/ZDI-11-132
zerodayinitiative.com/advisories/ZDI-11-133
zerodayinitiative.com/advisories/ZDI-11-134
exchange.xforce.ibmcloud.com/vulnerabilities/66725
support.ca.com/irj/portal/anonymous/phpsupcontent

これらの製品をお使いですか？サイトをスキャンして、脆弱なバージョンが公開されていないか確認しましょう。

無料でサイトをスキャン