CVEvulnerability

CVE-2005-3653

10.0 HIGH Published 2005-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

Affected configurations

• broadcom brightstor arcserve backup 9.01 • broadcom brightstor arcserve backup 11.1 • broadcom brightstor arcserve backup 11.5 • broadcom brightstor arcserve backup laptops desktops 11.0 • broadcom brightstor arcserve backup laptops desktops 11.1 • broadcom brightstor portal 11.1 • broadcom brightstor process automation manager 11.1 • broadcom brightstor san manager 11.1 • broadcom brightstor san manager 11.5 • broadcom brightstor storage resource manager 6.3 • broadcom brightstor storage resource manager 6.4 • broadcom brightstor storage resource manager 11.1 • broadcom brightstor storage resource manager 11.5 • broadcom etrust admin 8.1 • broadcom etrust audit aries 8.0 • broadcom etrust audit irecorder 1.5 • broadcom etrust audit irecorder 8.0 • broadcom etrust identity minder 8.0 • broadcom etrust integrated threat management 8.0 • broadcom itechnology igateway (<= 4.0.050615) • broadcom unicenter asset portfolio management 11.0 • broadcom unicenter autosys jm 11.0 • broadcom unicenter service delivery 11.0 • broadcom unicenter service desk 11.0 • broadcom unicenter service desk knowledge tools 11.0 • broadcom unicenter service fulfillment 2.2 • broadcom unicenter service metric analysis 11.0 • ca brightstor arcserve backup 11 • ca brightstor enterprise backup 10.0 • ca brightstor enterprise backup 10.5 • ca etrust audit aries 1.5 • ca etrust directory 8.1 web components • ca etrust secure content manager 8.0 • ca unicenter application performance monitor 11.0 • ca unicenter application server managment 11.0 • ca unicenter ca web services distributed management 11.0 • ca unicenter exchange management console 11.0 • ca unicenter management 3.5 • ca unicenter management 11.0 • ca unicenter service catalog fulfillment accounting 11.0 • ca unicenter service fulfillment 11.0 • ca unicenter service level management 11.0 • ca unicenter web server management 11.0 • ca unicenter web services distributed management 11.0

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References