CVE-2005-3653

Sažetak

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

Reference

http://marc.info/?l=full-disclosure&m=113803349715927&w=2
http://secunia.com/advisories/18591
http://securityreason.com/securityalert/380
http://securitytracker.com/id?1015526
http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376
http://www.osvdb.org/22688
http://www.securityfocus.com/archive/1/423288/100/0/threaded
http://www.securityfocus.com/archive/1/423403/100/0/threaded
http://www.securityfocus.com/bid/16354
http://www.vupen.com/english/advisories/2006/0311
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778
https://exchange.xforce.ibmcloud.com/vulnerabilities/24269

CVSS

Base:	10.0
Impact:	10.0
Exploitability:	10.0

Pristup

Vektor	Složenost	Autentikacija
NETWORK	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
COMPLETE	COMPLETE	COMPLETE

CVSS vektor

AV:N/AC:L/Au:N/C:C/I:C/A:C

Zadnje važnije ažuriranje

14-04-2021 - 15:41

Objavljeno

31-12-2005 - 05:00