CVE-2011-3011 BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vector...
MediumCVSS 5.0
EPSS 71.6%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ca arcserve d2d | = r15 | No fix listed |
References
- 8338 third-party-advisory
- 20110810 CA20110809-01: Security Notice for CA ARCserve D2D mailing-list
- 48897 exploit vdb-entry
- support.ca.com