CVE-2005-3653
Critical
Description
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
SeverityCritical
CVSS10.0
Exploit probability—
Product
Broadcom Itechnology Igateway
PublishedDec 31, 2005
First seenDec 31, 2005
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom itechnology_igateway | v ≤ 4.0.050615 | — |
| broadcom brightstor_arcserve_backup | 9.01, 11.1, 11.5 | — |
| broadcom brightstor_arcserve_backup_laptops_desktops | 11.0, 11.1 | — |
| broadcom brightstor_portal | 11.1 | — |
| broadcom brightstor_process_automation_manager | 11.1 | — |
| broadcom brightstor_san_manager | 11.1, 11.5 | — |
| broadcom brightstor_storage_resource_manager | 6.3, 6.4, 11.1, 11.5 | — |
| broadcom etrust_admin | 8.1 | — |
| broadcom etrust_audit_aries | 8.0 | — |
| broadcom etrust_audit_irecorder | 1.5, 8.0 | — |
| broadcom etrust_identity_minder | 8.0 | — |
| broadcom etrust_integrated_threat_management | 8.0 | — |
| broadcom unicenter_asset_portfolio_management | 11.0 | — |
| broadcom unicenter_autosys_jm | 11.0 | — |
| broadcom unicenter_service_delivery | 11.0 | — |
| broadcom unicenter_service_desk | 11.0 | — |
| broadcom unicenter_service_desk_knowledge_tools | 11.0 | — |
| broadcom unicenter_service_fulfillment | 2.2 | — |
| broadcom unicenter_service_metric_analysis | 11.0 | — |
| ca brightstor_arcserve_backup | 11 | — |
| ca brightstor_enterprise_backup | 10.0, 10.5 | — |
| ca etrust_audit_aries | 1.5 | — |
| ca etrust_directory | 8.1_web_components | — |
| ca etrust_secure_content_manager | 8.0 | — |
| ca unicenter_application_performance_monitor | 11.0 | — |
| ca unicenter_application_server_managment | 11.0 | — |
| ca unicenter_ca_web_services_distributed_management | 11.0 | — |
| ca unicenter_exchange_management_console | 11.0 | — |
| ca unicenter_management | 3.5, 11.0 | — |
| ca unicenter_service_catalog_fulfillment_accounting | 11.0 | — |
| ca unicenter_service_fulfillment | 11.0 | — |
| ca unicenter_service_level_management | 11.0 | — |
| ca unicenter_web_server_management | 11.0 | — |
| ca unicenter_web_services_distributed_management | 11.0 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.