CA20110413-01 Security Notice for CA Total Defense - CA Technologies
{{search ? 'Close':'Search'}}

CA20110413-01: Security Notice for CA Total Defense

Issued: April 13, 2011

CA Technologies support is alerting customers to security risks with CA Total Defense. Multiple vulnerabilities exist that can allow a remote attacker to possibly execute arbitrary code. CA issued an automatic update to address the vulnerabilities.

The first set of vulnerabilities, CVE-2011-1653, are due to insufficient handling of certain request parameters. A remote attacker can use various SQL injection attacks to potentially compromise the Unified Network Control (UNC) Server.

The second vulnerability, CVE-2011-1654, occurs due to insufficient handling of file upload parameters. A remote attacker can upload a file and use it to execute arbitrary code on the Total Defense Management Server.

The third vulnerability, CVE-2011-1655, is due to insufficient protection of sensitive information. A remote attack can acquire account credentials and take privileged action on the Unified Network Control (UNC) Server.

Risk Rating

High

Platform

Windows

Affected Products

CA Total Defense r12

Non-Affected Products

CA Total Defense r12 SE2

How to determine if the installation is affected

These Total Defense components will be updated to the following versions once SE2 is installed:

TD Management Server Core: 12.0.0.621
UNC: 12.0.0.622

If either component is not updated to the specified version or later, the installation may be vulnerable.

Solution

Install the SE2 update. If content updates are enabled, the update will happen automatically. The update was made available April 4, 2011.

See the following announcement for more information:

CA Total Defense r12 SE2 Content Update is Now Available

References

CVE-2011-1653 - Total Defense SQL injections
CVE-2011-1654 - Total Defense file upload
CVE-2011-1655 - Total Defense credential exposure

Acknowledgement

CVE-2011-1653, CVE-2011-1654, CVE-2011-1655 - Andrea Micalizzi through the TippingPoint ZDI

Change History

Version 1.0: Initial Release

If additional information is required, please contact CA Technologies Support at http://support.ca.com/.

If you discover a vulnerability in CA Technologies products, please report your findings to the CA Technologies Product Vulnerability Response Team.

Chat with CA

Just give us some brief information and we'll connect you to the right CA Expert.

Our hours of availability are 8AM - 5PM CST.

All Fields Required

connecting

We're matching your request.

Unfortunately, we can't connect you to an agent. If you are not automatically redirected please click here.

  • {{message.agentProfile.name}} will be helping you today.

    View Profile


  • Transfered to {{message.agentProfile.name}}

    {{message.agentProfile.name}} joined the conversation

    {{message.agentProfile.name}} left the conversation

  • Your chat with {{$storage.chatSession.messages[$index - 1].agentProfile.name}} has ended.
    Thank you for your interest in CA.


    How Did We Do?
    Let us know how we did so that we can maintain a quality experience.

    Take Our Survey >

    Rate Your Chat Experience.

    {{chat.statusMsg}}

agent is typing