CVE-2009-0043

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 53.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2009-01-08 · updated 2026-06-16
Weakness: CWE-264

Description

The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.

Affected products

Ca Service Level Management: 3.5
Ca Service Metric Analysis: r11.0, r11.1, r11.1-sp1

References

http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx
http://securityreason.com/securityalert/4887
http://www.securityfocus.com/archive/1/499857/100/0/threaded
http://www.securityfocus.com/bid/33161
http://www.vupen.com/english/advisories/2009/0053
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148
http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx
http://securityreason.com/securityalert/4887
http://www.securityfocus.com/archive/1/499857/100/0/threaded
http://www.securityfocus.com/bid/33161
http://www.vupen.com/english/advisories/2009/0053
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148

Get alerted when CVE-2009-0043 or the next vulnerability affects your stack