CVE:CVE-2009-0043
CNNVD:CNNVD-200901-086
CA Service Metric Analysis和Service Level Management都是CA的服务管理产品。
Service Metric Analysis和Service Level Management没有充分地限制对smmsnmpd服务的访问，远程攻击者可以在该服务的环境中执行任意命令。
solution:Upgrade ca service_level_management to a higher version than 3.5,and avoid the version 3.5; Upgrade ca service_metric_analysis to a higher version than r11.0,r11.1,r11.1:sp1,and avoid the version r11.0,r11.1,r11.1:sp1