CVE-2005-3190 Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.
HighCVSS 7.5
EPSS 64.8%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom igateway | = 3.0 | No fix listed |
| broadcom igateway | = 4.0 | No fix listed |
References
- 20051014 CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability mailing-list
- 20051019 RE: CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability mailing-list
- 17085 third-party-advisory
- 86 third-party-advisory
- 1015045 vdb-entry
- 19920 vdb-entry
- 15025 vdb-entry
- www3.ca.com vendor-advisory
- brightstor-igateway-http-get-bo(22560) vdb-entry