CVSS: 10.0EPSS: 25%CPEs: 2EXPL: 0CVE-2011-2667 – CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-2667
20 Jul 2011 — Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request. Icihttp.exe en CA Gateway Security para HTTP, como se usa en CA Gateway Security v8.1 antes de v8.1.0.69 y CA Total Defense r12, no analiza correctamente las direcciones URL, lo que permite a atacantes remoto... • http://secunia.com/advisories/45332 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 22%CPEs: 2EXPL: 0CVE-2011-0758 – CA ETrust Secure Content Manager Common Services Transport Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0758
07 Feb 2011 — The eCS component (ECSQdmn.exe) in CA ETrust Secure Content Manager 8.0 and CA Gateway Security 8.1 allows remote attackers to cause a denial of service (crash) and execute arbitrary code via a crafted request to port 1882, involving an incorrect integer calculation and a heap-based buffer overflow. El componente eCS (ECSQdmn.exe) en CA ETrust Secure Content Manager versión 8.0 y CA Gateway Security versión 8.1, permite a los atacantes remotos causar una denegación de servicio (bloqueo) y ejecutar código ar... • http://dvlabs.tippingpoint.com/blog/2011/02/07/zdi-disclosure-ca • CWE-189: Numeric Errors •
CVSS: 9.3EPSS: 8%CPEs: 52EXPL: 0CVE-2009-3587
https://notcve.org/view.php?id=CVE-2009-3587
13 Oct 2009 — Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service and possibly execute arbitrary code via a crafted RAR archive file that triggers heap corruption, a different vulnerability than CVE-2009-3588. Vulnerabilidad no espe... • http://osvdb.org/58691 •
CVSS: 7.5EPSS: 1%CPEs: 55EXPL: 0CVE-2009-3588
https://notcve.org/view.php?id=CVE-2009-3588
13 Oct 2009 — Unspecified vulnerability in the arclib component in the Anti-Virus engine in CA Anti-Virus for the Enterprise (formerly eTrust Antivirus) 7.1 through r8.1; Anti-Virus 2007 (v8) through 2009; eTrust EZ Antivirus r7.1; Internet Security Suite 2007 (v3) through Plus 2009; and other CA products allows remote attackers to cause a denial of service via a crafted RAR archive file that triggers stack corruption, a different vulnerability than CVE-2009-3587. Vulnerabilidad inespecífica en el componente arclib en el... • http://secunia.com/advisories/36976 •
CVSS: 7.5EPSS: 0%CPEs: 15EXPL: 0CVE-2006-4562
https://notcve.org/view.php?id=CVE-2006-4562
06 Sep 2006 — The proxy DNS service in Symantec Gateway Security (SGS) allows remote attackers to make arbitrary DNS queries to third-party DNS servers, while hiding the source IP address of the attacker. NOTE: another researcher has stated that the default configuration does not proxy DNS queries received on the external interface ** DISCUTIDO ** El servicio proxy DNS en Symantec Gateway Security (SGS) permite a un atacante remoto hacer consultas DNS de su elección a los servidores DNS de terceras personas, mientras se ... • http://www.securityfocus.com/archive/1/444114/100/100/threaded •
CVSS: 5.3EPSS: 8%CPEs: 5EXPL: 2CVE-2006-2341 – Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage
https://notcve.org/view.php?id=CVE-2006-2341
12 May 2006 — The HTTP proxy in Symantec Gateway Security 5000 Series 2.0.1 and 3.0, and Enterprise Firewall 8.0, when NAT is being used, allows remote attackers to determine internal IP addresses by using malformed HTTP requests, as demonstrated using a get request without a space separating the URI. • https://www.exploit-db.com/exploits/27852 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •