CVE-2011-1654

Publicada em 15 abr 2011 · Atualizada em 06 ago 2024

8Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackepss 11%

probabilidade de exploração

11%top 4% das CVEs

exploração observada

nãonenhuma fonte reporta

Directory traversal vulnerability in the Heartbeat Web Service in CA.Itm.Server.ManagementWS.dll in the Management Server in CA Total Defense (TD) r12 before SE2 allows remote attackers to execute arbitrary code via directory traversal sequences in the GUID parameter in an upload request to FileUploadHandler.ashx.

Produtos afetados

n/a · n/a

Referências

http://secunia.com/advisories/44097 http://securitytracker.com/id?1025353 https://exchange.xforce.ibmcloud.com/vulnerabilities/66726 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D http://www.securityfocus.com/archive/1/517488/100/0/threaded http://www.securityfocus.com/archive/1/517494/100/0/threaded http://www.securityfocus.com/bid/47357 http://www.vupen.com/english/advisories/2011/0977 http://www.zerodayinitiative.com/advisories/ZDI-11-126/