Unscored severity · published Oct 2, 2012
CVE-2012-0691
CA License (aka CA Licensing) before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors
–
CVSS
0.3%
EPSS
No
On KEV
Description
CA License (aka CA Licensing) before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LS
License Software · Broadcom
through 1.90.02; 0.1.0.15; 1.5.3; 1.8.0.110; 1.8.0.114; 1.9.1.105; +5 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-0691
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-0691
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2012-10/0011.html
www.securitytracker.com
http://www.securitytracker.com/id?1027588
support.ca.com
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B79CE87E4-7A35-48A3-99BA-5A0DBEDECA94%7D
More from License Software
–
CVE-2012-0692
CA License (aka CA Licensing) before 1.90.03 allows local users to modify or create arbitrary files, and consequently gain privileges, via unspecified vectors
–
CVE-2005-0581
Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the…
–
CVE-2005-0582
Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request
–
CVE-2005-0583
Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via
