{"api_version":"1","generated_at":"2026-07-23T12:44:54+00:00","cve":"CVE-2009-0043","urls":{"html":"https://cve.report/CVE-2009-0043","api":"https://cve.report/api/cve/CVE-2009-0043.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2009-0043","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2009-0043"},"summary":{"title":"CVE-2009-0043","description":"The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.","state":"PUBLISHED","assigner":"mitre","published_at":"2009-01-08 19:30:11","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-264","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://securityreason.com/securityalert/4887","name":"http://securityreason.com/securityalert/4887","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/499857/100/0/threaded","name":"http://www.securityfocus.com/archive/1/499857/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/33161","name":"http://www.securityfocus.com/bid/33161","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"Multiple CA Service Management Products Unspecified Remote Command Execution Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx","name":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Blogger - Broadcom Community - Discussion Forums, Technical Docs, and Expert Blogs","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148","name":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"404 Not Found","mime":"text/html","httpstatus":"404","archivestatus":"404"},{"url":"http://www.vupen.com/english/advisories/2009/0053","name":"http://www.vupen.com/english/advisories/2009/0053","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2009-0043","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2009-0043","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2009","cve_id":"43","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"service_level_management","cpe6":"3.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"43","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"service_metric_analysis","cpe6":"r11.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"43","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"service_metric_analysis","cpe6":"r11.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2009","cve_id":"43","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"ca","cpe5":"service_metric_analysis","cpe6":"r11.1","cpe7":"sp1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T04:17:10.378Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"33161","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/33161"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148"},{"name":"4887","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/4887"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx"},{"name":"20090107 CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/499857/100/0/threaded"},{"name":"ADV-2009-0053","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2009/0053"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2009-01-07T00:00:00.000Z","descriptions":[{"lang":"en","value":"The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-11T19:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"33161","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/33161"},{"tags":["x_refsource_CONFIRM"],"url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148"},{"name":"4887","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/4887"},{"tags":["x_refsource_CONFIRM"],"url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx"},{"name":"20090107 CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/499857/100/0/threaded"},{"name":"ADV-2009-0053","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2009/0053"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2009-0043","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"33161","refsource":"BID","url":"http://www.securityfocus.com/bid/33161"},{"name":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148","refsource":"CONFIRM","url":"https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148"},{"name":"4887","refsource":"SREASON","url":"http://securityreason.com/securityalert/4887"},{"name":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx","refsource":"CONFIRM","url":"http://community.ca.com/blogs/casecurityresponseblog/archive/2009/01/07.aspx"},{"name":"20090107 CA20090107-01: CA Service Metric Analysis and CA Service Level Management smmsnmpd Arbitrary Command Execution Vulnerability","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/499857/100/0/threaded"},{"name":"ADV-2009-0053","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2009/0053"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2009-0043","datePublished":"2009-01-08T19:00:00.000Z","dateReserved":"2009-01-07T00:00:00.000Z","dateUpdated":"2024-08-07T04:17:10.378Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2009-01-08 19:30:11","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-264","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":true,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:ca:service_level_management:3.5:*:*:*:*:*:*:*","matchCriteriaId":"8EDC9EFE-8401-4A6C-9C7F-0E6945839406"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:service_metric_analysis:r11.0:*:*:*:*:*:*:*","matchCriteriaId":"84F66415-014D-4F3B-97AD-87189E100CA5"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:service_metric_analysis:r11.1:*:*:*:*:*:*:*","matchCriteriaId":"07202650-A1D8-4235-9C2B-9EB480205E0B"},{"vulnerable":true,"criteria":"cpe:2.3:a:ca:service_metric_analysis:r11.1:sp1:*:*:*:*:*:*","matchCriteriaId":"291902E2-F337-41C5-B570-4E8C959002BE"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2009","CveId":"43","Ordinal":"1","Title":"CVE-2009-0043","CVE":"CVE-2009-0043","Year":"2009"},"notes":[{"CveYear":"2009","CveId":"43","Ordinal":"1","NoteData":"The smmsnmpd service in CA Service Metric Analysis r11.0 through r11.1 SP1 and Service Level Management 3.5 does not properly restrict access, which allows remote attackers to execute arbitrary commands via unspecified vectors.","Type":"Description","Title":"CVE-2009-0043"},{"CveYear":"2009","CveId":"43","Ordinal":"2","NoteData":"2009-01-08","Type":"Other","Title":"Published"},{"CveYear":"2009","CveId":"43","Ordinal":"3","NoteData":"2018-10-11","Type":"Other","Title":"Modified"}]}}}