CVE-2016-9795

The casrvc program in CA Common Services, as used in CA Client Automation 12.8, 12.9, and 14.0; CA SystemEDGE 5.8.2 and 5.9; CA Systems Performance for Infrastructure Managers 12.8 and 12.9; CA Universal Job Management Agent 11.2; CA Virtual Assurance for Infrastructure Managers 12.8 and 12.9; CA Workload Automation AE 11, 11.3, 11.3.5, and 11.3.6 on AIX, HP-UX, Linux, and Solaris allows local users to modify arbitrary files and consequently gain root privileges via vectors related to insufficient validation.

• CWE-20

• http://www.securityfocus.com/archive/1/540062/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/95819Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037730Third Party Advisory, VDB Entry
• https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170126-01--security-notice-for-ca-common-services-casrvc.htmlVendor Advisory
• http://www.securityfocus.com/archive/1/540062/100/0/threadedThird Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/95819Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037730Third Party Advisory, VDB Entry
• https://www.ca.com/us/services-support/ca-support/ca-support-online/product-content/recommended-reading/security-notices/ca20170126-01--security-notice-for-ca-common-services-casrvc.htmlVendor Advisory

Published

Jan 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9789Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9790Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9791Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9792Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-9793The sock_setsockopt function in net/core/sock.c in the Linux…7.8
• CVE-2016-9794Race condition in the snd_pcm_period_elapsed function in sou…7.8
• CVE-2016-9796Alcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes differ…
• CVE-2016-9797In BlueZ 5.42, a buffer over-read was observed in "l2cap_dum…
• CVE-2016-9798In BlueZ 5.42, a use-after-free was identified in "conf_opt"…
• CVE-2016-9799In BlueZ 5.42, a buffer overflow was observed in "pklg_read_…
• CVE-2016-9800In BlueZ 5.42, a buffer overflow was observed in "pin_code_r…
• CVE-2016-9801In BlueZ 5.42, a buffer overflow was observed in "set_ext_ct…