CVE-2005-3653
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
- Score
- CVSS 2.0 10.0 Critical
- Status
- Modified - cve@mitre.org
- Published
- 2005-12-31
- Last modified
- 2024-08-07
- Weaknesses
- CWE-119
Affected products
- Brightstor Arcserve Backup (Broadcom)
- Brightstor Arcserve Backup Laptops Desktops (Broadcom)
- Brightstor Portal (Broadcom)
- Brightstor Process Automation Manager (Broadcom)
- Brightstor San Manager (Broadcom)
- Brightstor Storage Resource Manager (Broadcom)
- Etrust Admin (Broadcom)
- Etrust Audit Aries (Broadcom)
- Etrust Audit Irecorder (Broadcom)
- Etrust Identity Minder (Broadcom)
- Etrust Integrated Threat Management (Broadcom)
- Itechnology Igateway (Broadcom)
- Unicenter Asset Portfolio Management (Broadcom)
- Unicenter Autosys Jm (Broadcom)
- Unicenter Service Delivery (Broadcom)
- Unicenter Service Desk (Broadcom)
- Unicenter Service Desk Knowledge Tools (Broadcom)
- Unicenter Service Fulfillment (Broadcom)
- Unicenter Service Metric Analysis (Broadcom)
- Brightstor Arcserve Backup (Ca)
- Brightstor Enterprise Backup (Ca)
- Etrust Audit Aries (Ca)
- Etrust Directory (Ca)
- Etrust Secure Content Manager (Ca)
- Unicenter Application Performance Monitor (Ca)
- Unicenter Application Server Managment (Ca)
- Unicenter Ca Web Services Distributed Management (Ca)
- Unicenter Exchange Management Console (Ca)
- Unicenter Management (Ca)
- Unicenter Service Catalog Fulfillment Accounting (Ca)
- Unicenter Service Fulfillment (Ca)
- Unicenter Service Level Management (Ca)
- Unicenter Web Server Management (Ca)
- Unicenter Web Services Distributed Management (Ca)
References
- http://marc.info/?l=full-disclosure&m=113803349715927&w=2
- http://secunia.com/advisories/18591
- http://securityreason.com/securityalert/380
- http://securitytracker.com/id?1015526
- http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376
- http://www.osvdb.org/22688
- http://www.securityfocus.com/archive/1/423288/100/0/threaded
- http://www.securityfocus.com/archive/1/423403/100/0/threaded
- http://www.securityfocus.com/bid/16354
- http://www.vupen.com/english/advisories/2006/0311
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24269
