Unscored severity · published May 2, 2005
CVE-2005-0581
Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the…
–
CVSS
46.3%
EPSS
No
On KEV
Description
Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format.
Exploitation
Is it being used?
Exploit prediction (EPSS)46.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LS
License Software · Broadcom
0.1.0.15 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0581
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0581
marc.info
http://marc.info/?l=bugtraq&m=110979326828704&w=2
Patch
http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp
Patch
http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities
Patch
http://www.idefense.com/application/poi/display?id=213&type=vulnerabilities
Patch
http://www.idefense.com/application/poi/display?id=214&type=vulnerabilities
Patch
http://www.idefense.com/application/poi/display?id=215&type=vulnerabilities
More from License Software
–
CVE-2012-0692
CA License (aka CA Licensing) before 1.90.03 allows local users to modify or create arbitrary files, and consequently gain privileges, via unspecified vectors
–
CVE-2012-0691
CA License (aka CA Licensing) before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors
–
CVE-2005-0582
Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request
–
CVE-2005-0583
Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via