Unscored severity · published Apr 7, 2010
CVE-2010-1223
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or…
–
CVSS
16.8%
EPSS
No
On KEV
Description
Multiple buffer overflows in CA XOsoft r12.0 and r12.5 allow remote attackers to execute arbitrary code via (1) a malformed request to the ws_man/xosoapapi.asmx SOAP endpoint or (2) a long string to the entry_point.aspx service.
Exploitation
Is it being used?
Exploit prediction (EPSS)16.8% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
XC
Xosoft Content Distribution · CA
r12.0; r12.5 · source: NVD
XH
Xosoft High Availability · CA
r12.0; r12.5 · source: NVD
XR
Xosoft Replication · CA
r12.0; r12.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-1223
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-1223
www.securityfocus.com
http://www.securityfocus.com/archive/1/510564/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/510565/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/archive/1/510567/100/0/threaded
Patch
http://www.securityfocus.com/bid/39238
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-10-065/
www.zerodayinitiative.com
http://www.zerodayinitiative.com/advisories/ZDI-10-066/
More from Xosoft Content Distribution
–
CVE-2010-3984
Buffer overflow in mng_core_com.dll in CA XOsoft Replication r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft High Availability r12.0 SP1 and r12.5 SP2 rollup, CA XOsoft Content…
–
CVE-2010-1222
CA XOsoft r12.5 does not properly perform authentication, which allows remote attackers to obtain potentially sensitive information via a SOAP request
–
CVE-2010-1221
CA XOsoft r12.0 and r12.5 does not properly perform authentication, which allows remote attackers to enumerate usernames via a SOAP request