medium5.0Public exploit code
CVE-2011-3011
BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- CA Arcserve D2D - GWT RPC Credential Information Disclosure (Metasploit)2011-07-25 · local · windows · Verified
Impact
BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ca | Arcserve D2d | Version r15 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/8338
- http://www.securityfocus.com/archive/1/519234/100/0/threaded
- http://www.securityfocus.com/bid/48897
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B7D3ACC0F-6C01-4BE2-B5C0-C430CEB45BE6%7D
- http://securityreason.com/securityalert/8338
- http://www.securityfocus.com/archive/1/519234/100/0/threaded
- http://www.securityfocus.com/bid/48897
- https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B7D3ACC0F-6C01-4BE2-B5C0-C430CEB45BE6%7D