Lucene search

K
cve[email protected]CVE-2011-3011
HistoryAug 15, 2011 - 7:55 p.m.

CVE-2011-3011

2011-08-1519:55:04
CWE-200
web.nvd.nist.gov
30
ca arcserve d2d r15
baseserviceimpl.class
remote code execution
cve-2011-3011
nvd
security vulnerability

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.948 High

EPSS

Percentile

99.3%

BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.

Affected configurations

NVD
Node
caarcserve_d2dMatchr15
CPENameOperatorVersion
ca:arcserve_d2dca arcserve d2deqr15

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7.2 High

AI Score

Confidence

Low

0.948 High

EPSS

Percentile

99.3%