CVE-2011-1653
- State
- Published
- Severity
- Not scored
- Published
- Apr 15, 2011
- Updated
- Aug 6, 2024
- Reserved
- Apr 6, 2011
Description
Multiple SQL injection vulnerabilities in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 allow remote attackers to execute arbitrary SQL commands via vectors involving the (1) UnAssignFunctionalRoles, (2) UnassignAdminRoles, (3) DeleteFilter, (4) NonAssignedUserList, (5) DeleteReportLayout, (6) DeleteReports, and (7) RegenerateReport stored procedures.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- totaldefense-multiple-sql-injection(66725)vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-11-128/
- 44097third-party-advisory
- 8403third-party-advisory
- 47355vdb-entry
- 20110413 ZDI-11-128: CA Total Defense Suite UnassignFunctionalUsers Stored Procedure SQL Injection Vulnerabilitymailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-11-133/
- 20110413 ZDI-11-134: CA Total Defense Suite UNC Management Console RegenerateReport SQL Injection Vulnerabilitymailing-list
- 20110413 ZDI-11-130: CA Total Defense Suite UNC Management Console DeleteFilter SQL Injection Vulnerabilitymailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-11-129/
- ADV-2011-0977vdb-entry
- 1025353vdb-entry
- 20110413 ZDI-11-131: CA Total Defense Suite NonAssignedUserList Stored Procedure SQL Injection Vulnerabilitymailing-list
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D
- http://www.zerodayinitiative.com/advisories/ZDI-11-134/
- 20110413 ZDI-11-132: CA Total Defense Suite UNC Management Console DeleteReportLayout SQL Injection Vulnerabilitymailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-11-132/
- http://www.zerodayinitiative.com/advisories/ZDI-11-131/
- 20110413 ZDI-11-133: CA Total Defense Suite UNC Management Console DeleteReports SQL Injection Vulnerabilitymailing-list
- 20110413 CA20110413-01: Security Notice for CA Total Defensemailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-11-130/
- 20110413 ZDI-11-129: CA Total Defense Suite UnassignAdminRoles Stored Procedure SQL Injection Vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.