CVE-2012-5973
Published Dec 10, 2012
Last updated 7 years ago
Overview
- Description
- CA XCOM Data Transport r11.0 and r11.5 on UNIX and Linux allows remote attackers to execute arbitrary commands via a crafted request.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-94
Social media
- Hype score
- Not currently trending
Evaluator
- Comment
- -
- Impact
- Per http://community.ca.com/blogs/casecurityresponseblog/archive/2012/12/05/ca20121205-01-security-notice-for-ca-xcom-data-transport-on-unix-and-linux.aspx: "I published a new security notice today for a remote command execution vulnerability reported by Jurgens van der Merwe and Junaid Loonat from SensePost that affects the Unix and Linux versions of XCOM Data Transport. This notice has a risk rating of high due to the possibility of total server compromise"
- Solution
- Per http://community.ca.com/blogs/casecurityresponseblog/archive/2012/12/05/ca20121205-01-security-notice-for-ca-xcom-data-transport-on-unix-and-linux.aspx: "I published a new security notice today for a remote command execution vulnerability reported by Jurgens van der Merwe and Junaid Loonat from SensePost that affects the Unix and Linux versions of XCOM Data Transport. This notice has a risk rating of high due to the possibility of total server compromise"
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ca:xcom_data_transport:r11.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABB56777-D154-4176-A30D-6DEBFF505630"
},
{
"criteria": "cpe:2.3:a:ca:xcom_data_transport:r11.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3C46F419-3FEA-4861-8D50-B4FBE78E29EF"
}
],
"operator": "OR"
}
]
}
]