« Volver al listado

CVE-2011-3849

Estado: ModificadaMedia (5)—

Vulnerabilidad no especificada en dxserver antes de v6279 en CA Directory v8.1 y en CA Directory r12 antes de SP7 CR1 permite a atacantes remotos provocar una denegación de servicio (por caída del demonio) a través de un paquete SNMP diseñado.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Broadcom — Directory

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2011-3849",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2011-11-19T03:58:55.493",
  "references": [
    {
      "url": "http://www.securityfocus.com/archive/1/520547/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7b286545DB-00B9-4B4C-8DE7-F00827F3CC75%7d",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/520547/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7b286545DB-00B9-4B4C-8DE7-F00827F3CC75%7d",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-noinfo"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP packet."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad no especificada en dxserver antes de v6279 en CA Directory v8.1 y en  CA Directory r12 antes de SP7 CR1 permite a atacantes remotos provocar una denegación de servicio (por caída del demonio) a través de un paquete SNMP diseñado."
    }
  ],
  "lastModified": "2026-06-16T23:34:01.893",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:broadcom:directory:8.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "5DEC7313-009F-4292-AFAD-56F84AAE7CD2"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:directory:r12:sp1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3C2ADDC-C25A-4086-AED1-F9B6DAF020B9"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:directory:r12:sp2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "544F3691-F6A6-4A61-B46A-3F02B352C0C6"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:directory:r12:sp3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "872F3FFE-847F-46F6-90A6-AF5F65048271"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:directory:r12:sp4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E578A9E-2150-4DCD-A5F1-0995D45EBC16"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:directory:r12:sp5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1331D5FF-98FC-42F0-AF66-55AA420F4C88"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:directory:r12:sp6:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BB34B6A6-A1EA-40E3-80F7-C90610F5F88F"
            },
            {
              "criteria": "cpe:2.3:a:broadcom:directory:r12:sp7:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "06999560-C876-455F-9D79-5A32373B2E6D"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}