Vulnerability CVE-2011-1653 - CERT Civis.Net

Vulnerability Name:

CVE-2011-1653 (CCN-66725)

Assigned:

2011-04-13

Published:

2011-04-13

Updated:

2021-04-12

Summary:

Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.

CVSS v3 Severity:

7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
8.3 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:F/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

7.5 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
6.2 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:F/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

Vulnerability Consequences:

Data Manipulation

References:

Source: MITRE
Type: CNA
CVE-2011-1653

Source: CCN
Type: SA44097
CA Total Defense Multiple Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
44097

Source: SREASON
Type: UNKNOWN
8403

Source: SECTRACK
Type: UNKNOWN
1025353

Source: CCN
Type: OSVDB ID: 74968
CA Total Defense management.asmx Multiple Stored Procedure SQL Injection

Source: CCN
Type: OSVDB ID: 74969
CA Total Defense MainApplication.html DeleteFilter Stored Procedure SQL Injection

Source: BUGTRAQ
Type: UNKNOWN
20110413 ZDI-11-130: CA Total Defense Suite UNC Management Console DeleteFilter SQL Injection Vulnerability

Source: BUGTRAQ
Type: UNKNOWN
20110413 ZDI-11-131: CA Total Defense Suite NonAssignedUserList Stored Procedure SQL Injection Vulnerability

Source: BUGTRAQ
Type: UNKNOWN
20110413 ZDI-11-128: CA Total Defense Suite UnassignFunctionalUsers Stored Procedure SQL Injection Vulnerability

Source: BUGTRAQ
Type: UNKNOWN
20110413 ZDI-11-129: CA Total Defense Suite UnassignAdminRoles Stored Procedure SQL Injection Vulnerability

Source: BUGTRAQ
Type: UNKNOWN
20110413 CA20110413-01: Security Notice for CA Total Defense

Source: BUGTRAQ
Type: UNKNOWN
20110413 ZDI-11-132: CA Total Defense Suite UNC Management Console DeleteReportLayout SQL Injection Vulnerability

Source: BUGTRAQ
Type: UNKNOWN
20110413 ZDI-11-133: CA Total Defense Suite UNC Management Console DeleteReports SQL Injection Vulnerability

Source: BUGTRAQ
Type: UNKNOWN
20110413 ZDI-11-134: CA Total Defense Suite UNC Management Console RegenerateReport SQL Injection Vulnerability

Source: BID
Type: UNKNOWN
47355

Source: CCN
Type: BID-47355
Computer Associates Total Defense Multiple SQL Injection Vulnerabilities

Source: VUPEN
Type: Vendor Advisory
ADV-2011-0977

Source: MISC
Type: UNKNOWN
http://www.zerodayinitiative.com/advisories/ZDI-11-128/

Source: MISC
Type: UNKNOWN
http://www.zerodayinitiative.com/advisories/ZDI-11-129/

Source: MISC
Type: UNKNOWN
http://www.zerodayinitiative.com/advisories/ZDI-11-130/

Source: MISC
Type: UNKNOWN
http://www.zerodayinitiative.com/advisories/ZDI-11-131/

Source: MISC
Type: UNKNOWN
http://www.zerodayinitiative.com/advisories/ZDI-11-132/

Source: MISC
Type: UNKNOWN
http://www.zerodayinitiative.com/advisories/ZDI-11-133/

Source: MISC
Type: UNKNOWN
http://www.zerodayinitiative.com/advisories/ZDI-11-134/

Source: XF
Type: UNKNOWN
totaldefense-multiple-sql-injection(66725)

Source: XF
Type: UNKNOWN
totaldefense-multiple-sql-injection(66725)

Source: CCN
Type: CA20110413-01
Security Notice for CA Total Defense

Source: CONFIRM
Type: Broken Link
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={CD065CEC-AFE2-4D9D-8E0B-BE7F6E345866}

Source: EXPLOIT-DB
Type: EXPLOIT
Offensive Security Exploit Database [10-02-2011]

Source: CCN
Type: ZDI-11-128
CA Total Defense Suite UnassignFunctionalUsers Stored Procedure SQL Injection Vulnerability

Source: CCN
Type: ZDI-11-129
CA Total Defense Suite UnassignAdminRoles Stored Procedure SQL Injection Vulnerability

Source: CCN
Type: ZDI-11-130
CA Total Defense Suite UNC Management Console DeleteFilter SQL Injection Vulnerability

Source: CCN
Type: ZDI-11-131
CA Total Defense Suite NonAssignedUserList Stored Procedure SQL Injection Vulnerability

Source: CCN
Type: ZDI-11-132
CA Total Defense Suite UNC Management Console DeleteReportLayout SQL Injection Vulnerability

Source: CCN
Type: ZDI-11-133
CA Total Defense Suite UNC Management Console DeleteReports SQL Injection Vulnerability

Source: CCN
Type: ZDI-11-134
CA Total Defense Suite UNC Management Console RegenerateReport SQL Injection Vulnerability

Vulnerable Configuration:

Configuration 1:

cpe:/a:broadcom:total_defense:r12:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:broadcom:total_defense:r12:*:*:*:*:*:*:*

Denotes that component is vulnerable