CVE-2005-3653

Description

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/24269

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778

http://www.vupen.com/english/advisories/2006/0311

http://www.securityfocus.com/bid/16354

http://www.securityfocus.com/archive/1/423403/100/0/threaded

http://www.securityfocus.com/archive/1/423288/100/0/threaded

http://www.osvdb.org/22688

http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376

http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp

http://securitytracker.com/id?1015526

http://securityreason.com/securityalert/380

http://secunia.com/advisories/18591

http://marc.info/?l=full-disclosure&m=113803349715927&w=2

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3