CVE-2009-0043
35Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 46%
from disclosure to weapon0 days
Published on NVDJan 8
1st PoCJan 7
exploitation probability
46%top 1% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.
Affected products
n/a · n/apublic PoCs found — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/32711⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
References
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspxhttp://securityreason.com/securityalert/4887https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148http://www.securityfocus.com/archive/1/499857/100/0/threadedhttp://www.securityfocus.com/bid/33161http://www.vupen.com/english/advisories/2009/0053