Computer Associates Total Defense Heartbeat Web Service Remote Code Execution Vulnerability

Bugtraq ID:	47357
Class:	Design Error
CVE:	CVE-2011-1654
Remote:	Yes
Local:	No
Published:	Apr 13 2011 12:00AM
Updated:	Apr 13 2011 12:00AM
Credit:	Andrea Micalizzi aka rgod
Vulnerable:
Not Vulnerable:	Computer Associates Total Defense 12 SE2

Computer Associates Total Defense Heartbeat Web Service Remote Code Execution Vulnerability

Computer Associates Total Defense is prone to a remote code-execution vulnerability.

Successfully exploiting this issue will allow attackers to execute arbitrary code with elevated privileges, completely compromising affected computers. Failed exploit attempts will likely crash the affected service.

Total Defense r12 is vulnerable; other versions may also be affected.

Computer Associates Total Defense Heartbeat Web Service Remote Code Execution Vulnerability

Attackers can use a browser to exploit this issue.

Computer Associates Total Defense Heartbeat Web Service Remote Code Execution Vulnerability

Solution:
The vendor released patches to address this issue. Please see the references for more information.

Computer Associates Total Defense Heartbeat Web Service Remote Code Execution Vulnerability

References:

• CA Total Defense Product page (Computer Associates)
  
• CA20110413-01: Security Notice for CA Total Defense (Computer Associates)
  
• ZDI-11-126 CA Total Defense Suite Heartbeat Web Service Remote Code Execution Vu (Zero Day Initiative)