Login Request a demo
Unscored severity · published Dec 31, 2005
CVE-2005-3653
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to…
–
CVSS
18.6%
EPSS
No
On KEV
Description
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
Exploitation
Is it being used?
Exploit prediction (EPSS)18.6% · higher than 97% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Brightstor Arcserve Backup · Broadcom
9.01; 11.1; 11.5 · source: NVD
BA
Brightstor Arcserve Backup Laptops Desktops · Broadcom
11.0; 11.1 · source: NVD
BE
Brightstor Enterprise Backup · CA
10.0; 10.5; 10.5; 10.5 · source: NVD
BP
Brightstor Portal · Broadcom
11.1 · source: NVD
BP
Brightstor Process Automation Manager · Broadcom
11.1 · source: NVD
BS
Brightstor San Manager · Broadcom
11.1; 11.5 · source: NVD
BS
Brightstor Storage Resource Manager · Broadcom
6.3; 6.4; 11.1; 11.5 · source: NVD
EA
Etrust Admin · Broadcom
8.1 · source: NVD
EA
Etrust Audit Aries · CA
1.5; 1.5 · source: NVD
EA
Etrust Audit Irecorder · Broadcom
1.5; 1.5; 8.0 · source: NVD
ED
Etrust Directory · CA
8.1_web_components · source: NVD
EI
Etrust Identity Minder · Broadcom
8.0 · source: NVD
Affected product
BA
Brightstor Arcserve Backup
Broadcom
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-3653
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-3653
marc.info
http://marc.info/?l=full-disclosure&m=113803349715927&w=2
Patch
http://secunia.com/advisories/18591
securityreason.com
http://securityreason.com/securityalert/380
Patch
http://securitytracker.com/id?1015526
Patch
http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp
Patch
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376
More from Brightstor Arcserve Backup
–
CVE-2008-3175
Integer underflow in rxRPC.dll in the LGServer service in the server in CA ARCserve Backup for Laptops and Desktops 11.0 through 11.5 allows remote attackers to execute arbitrary…
–
CVE-2008-2241
Directory traversal vulnerability in caloggerd in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allows remote attackers to append arbitrary data to arbitrary files via…
–
CVE-2008-2242
Multiple buffer overflows in xdr functions in the server in CA BrightStor ARCServe Backup 11.0, 11.1, and 11.5 allow remote attackers to execute arbitrary code, as demonstrated by…
–
CVE-2008-1979
The Discovery Service (casdscvc) in CA ARCserve Backup 12.0.5454.0 and earlier allows remote attackers to cause a denial of service (crash) via a packet with a large integer value…
–
CVE-2007-4620
Multiple stack-based buffer overflows in Computer Associates (CA) Alert Notification Service (Alert.exe) 8.1.586.0, 8.0.450.0, and 7.1.758.0, as used in multiple CA products…