Multiple vulnerabilities have been reported in CA Total Defense, which can be exploited by malicious people to disclose potentially sensitive information and conduct SQL injection attacks.

1) Input passed via SOAP requests to management.asmx is not properly sanitised before being used in a SQL query for the ExportReport and uncsp_ViewReportsHomepage stored procedures. This can be exploited to manipulate SQL queries by injecting arbitrary SQL code.

2) An error within the App_Code.dll service can be exploited to disclose encrypted unsalted domain credentials.

The vulnerabilities are reported in versions prior to R12 SE3 (Build 831).

Solution
Update to version R12 SE3 (Build 831).

Provided and/or discovered by
Andrea Micalizzi aka rgod via ZDI.

Original Advisory
http://www.zerodayinitiative.com/advisories/ZDI-12-022/
http://www.zerodayinitiative.com/advisories/ZDI-12-023/
http://www.zerodayinitiative.com/advisories/ZDI-12-024/

Deep Links
Links available in Customer Area