CVE-2011-3011

BaseServiceImpl.class in CA ARCserve D2D r15 does not properly handle sessions, which allows remote attackers to obtain credentials, and consequently execute arbitrary commands, via unspecified vectors.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

71.63% chance of exploitation in the next 30 days, 99th percentile

Published

2011-08-15

Updated

2024-08-06

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ca_arcserve_rpc_aut…

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/41707

References

• CVE Record
• NVD entry

Related

• CVE-2011-3010
• CVE-2011-3026
• CVE-2011-2975
• CVE-2011-3122
• CVE-2011-2964
• CVE-2011-3125