A vulnerability has been reported in CA Service Level Management (SLM) and CA Service Metric Analysis (SMA), which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to insecure access restrictions associated with the "smmsnmpd" service and can be exploited to execute arbitrary commands in the context of the service.

The vulnerability is reported in the following products:
CA Service Level Management 3.5
CA Service Metric Analysis r11.0
CA Service Metric Analysis r11.1
CA Service Metric Analysis r11.1 SP1

Solution
Apply the patches.
Further details available in Customer Area

Provided and/or discovered by
The vendor credits Michel Arboi of Tenable Network Security.

Original Advisory
CA20090107-01:
https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=196148

Deep Links
Links available in Customer Area