The management.asmx module in the Management Web Service in the Unified Network Control (UNC) Server in CA Total Defense (TD) r12 before SE2 sends a cleartext response to unspecified getDBConfigSettings requests, which makes it easier for remote attackers to obtain database credentials, and subsequently execute arbitrary code, by sniffing the network, related to the UNCWS Web Service.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/archive/1/517492/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| http://secunia.com/advisories/44097 | third-party-advisory x_refsource_SECUNIA |
| http://www.vupen.com/english/advisories/2011/0977 | vdb-entry x_refsource_VUPEN |
| http://securitytracker.com/id?1025353 | vdb-entry x_refsource_SECTRACK |
| https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D | x_refsource_CONFIRM |
| http://www.zerodayinitiative.com/advisories/ZDI-11-127/ | x_refsource_MISC |
| http://www.securityfocus.com/bid/47356 | vdb-entry x_refsource_BID |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/66727 | vdb-entry x_refsource_XF |
| http://www.securityfocus.com/archive/1/517494/100/0/threaded | mailing-list x_refsource_BUGTRAQ |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://www.securityfocus.com/archive/1/517492/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://secunia.com/advisories/44097 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://www.vupen.com/english/advisories/2011/0977 | vdb-entry x_refsource_VUPEN x_transferred |
| http://securitytracker.com/id?1025353 | vdb-entry x_refsource_SECTRACK x_transferred |
| https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7BCD065CEC-AFE2-4D9D-8E0B-BE7F6E345866%7D | x_refsource_CONFIRM x_transferred |
| http://www.zerodayinitiative.com/advisories/ZDI-11-127/ | x_refsource_MISC x_transferred |
| http://www.securityfocus.com/bid/47356 | vdb-entry x_refsource_BID x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/66727 | vdb-entry x_refsource_XF x_transferred |
| http://www.securityfocus.com/archive/1/517494/100/0/threaded | mailing-list x_refsource_BUGTRAQ x_transferred |