CVE-2005-3653 Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary co...
HighCVSS 10.0
EPSS 18.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor arcserve backup | = 9.01 | No fix listed |
| broadcom brightstor arcserve backup | = 11.1 | No fix listed |
| broadcom brightstor arcserve backup | = 11.5 | No fix listed |
| broadcom brightstor arcserve backup laptops desktops | = 11.0 | No fix listed |
| broadcom brightstor arcserve backup laptops desktops | = 11.1 | No fix listed |
| broadcom brightstor portal | = 11.1 | No fix listed |
| broadcom brightstor process automation manager | = 11.1 | No fix listed |
| broadcom brightstor san manager | = 11.1 | No fix listed |
| broadcom brightstor san manager | = 11.5 | No fix listed |
| broadcom brightstor storage resource manager | = 6.3 | No fix listed |
| broadcom brightstor storage resource manager | = 6.4 | No fix listed |
| broadcom brightstor storage resource manager | = 11.1 | No fix listed |
| broadcom brightstor storage resource manager | = 11.5 | No fix listed |
| broadcom etrust admin | = 8.1 | No fix listed |
| broadcom etrust audit aries | = 8.0 | No fix listed |
| broadcom etrust audit irecorder | = 1.5-sp2 | No fix listed |
| broadcom etrust audit irecorder | = 1.5-sp3 | No fix listed |
| broadcom etrust audit irecorder | = 8.0 | No fix listed |
| broadcom etrust identity minder | = 8.0 | No fix listed |
| broadcom etrust integrated threat management | = 8.0 | No fix listed |
| broadcom itechnology igateway | <= 4.0.050615 | No fix listed |
| broadcom unicenter asset portfolio management | = 11.0 | No fix listed |
| broadcom unicenter autosys jm | = 11.0 | No fix listed |
| broadcom unicenter service delivery | = 11.0 | No fix listed |
| broadcom unicenter service desk | = 11.0 | No fix listed |
Show 21 more
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom unicenter service desk knowledge tools | = 11.0 | No fix listed |
| broadcom unicenter service fulfillment | = 2.2 | No fix listed |
| broadcom unicenter service metric analysis | = 11.0 | No fix listed |
| ca brightstor arcserve backup | = 11 | No fix listed |
| ca brightstor enterprise backup | = 10.0 | No fix listed |
| ca brightstor enterprise backup | = 10.5 | No fix listed |
| ca etrust audit aries | = 1.5-sp2 | No fix listed |
| ca etrust audit aries | = 1.5-sp3 | No fix listed |
| ca etrust directory | = 8.1_web_components | No fix listed |
| ca etrust secure content manager | = 8.0 | No fix listed |
| ca unicenter application performance monitor | = 11.0 | No fix listed |
| ca unicenter application server managment | = 11.0 | No fix listed |
| ca unicenter ca web services distributed management | = 11.0 | No fix listed |
| ca unicenter exchange management console | = 11.0 | No fix listed |
| ca unicenter management | = 3.5 | No fix listed |
| ca unicenter management | = 11.0 | No fix listed |
| ca unicenter service catalog fulfillment accounting | = 11.0 | No fix listed |
| ca unicenter service fulfillment | = 11.0 | No fix listed |
| ca unicenter service level management | = 11.0 | No fix listed |
| ca unicenter web server management | = 11.0 | No fix listed |
| ca unicenter web services distributed management | = 11.0 | No fix listed |
References
- 20060123 CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability mailing-list
- 18591 patch third-party-advisory vendor-advisory
- 380 third-party-advisory
- 1015526 patch vdb-entry
- supportconnectw.ca.com patch vendor-advisory
- 20060123 Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow patch third-party-advisory vendor-advisory
- 22688 patch vdb-entry
- 20060127 CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability [v1.1] mailing-list
- 20060123 CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability mailing-list
- 16354 patch vdb-entry
- ADV-2006-0311 vdb-entry vendor-advisory
- www3.ca.com
- ca-igateway-contentlength-bo(24269) vdb-entry