CVE:CVE-2016-9795
CNNVD:CNNVD-201702-164
CA Client Automation等都是美国CA公司的产品。CA Client Automation是一套自动化和远程客户端管理工具。CA Network and Systems Management是一套企业管理系统。CA Common Services是其中的一个在Unix/Linux平台上绑定的通用服务。
基于AIX、HP-UX、Linux和Solaris平台的多款CA产品中使用的CA Common Services存在安全漏洞。本地攻击者可利用该漏洞更改任意文件，获取root权限。以下产品和版本受到影响：CA Client Automation 12.8版本，12.9版本，14.0版本；CA SystemEDGE 5.8.2版本，5.9版本；CA Systems Performance for Infrastructure Managers 12.8版本，12.9版本；CA Universal Job Management Agent 11.2版本；CA Virtual Assurance for Infrastructure Managers 12.8版本，12.9版本；CA Workload Automation AE 11版本，11.3版本，11.3.5版本，11.3.6版本。
solution:Upgrade broadcom ca_workload_automation_ae to a higher version than 11.0,11.3,11.3.5,11.3.6,and avoid the version 11.0,11.3,11.3.5,11.3.6; Upgrade broadcom client_automation to a higher version than 12.8,12.9,14.0,and avoid the version 12.8,12.9,14.0; Upgrade broadcom systemedge to a higher version than 5.8.2,5.9,and avoid the version 5.8.2,5.9; Upgrade broadcom systems_performance_for_infrastructure_managers to a higher version than 12.8,12.9,and avoid the version 12.8,12.9; Upgrade ca universal_job_management_agent to a higher version than 11.2,and avoid the version 11.2; Upgrade ca virtual_assurance_for_infrastructure_managers to a higher version than 12.8,12.9,and avoid the version 12.8,12.9