CVE-2005-3653
Severity Score
10.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2005-11-18 CVE Reserved
- 2005-12-31 CVE Published
- 2023-09-29 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer
CAPEC
References (13)
| URL | Tag | Source |
|---|---|---|
| http://marc.info/?l=full-disclosure&m=113803349715927&w=2 | Mailing List | |
| http://securityreason.com/securityalert/380 | Third Party Advisory | |
| http://www.securityfocus.com/archive/1/423288/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/423403/100/0/threaded | Mailing List | |
| http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778 | X_refsource_confirm | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/24269 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/18591 | 2021-04-14 | |
| http://securitytracker.com/id?1015526 | 2021-04-14 | |
| http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp | 2021-04-14 | |
| http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376 | 2021-04-14 | |
| http://www.osvdb.org/22688 | 2021-04-14 | |
| http://www.securityfocus.com/bid/16354 | 2021-04-14 |
| URL | Date | SRC |
|---|---|---|
| http://www.vupen.com/english/advisories/2006/0311 | 2021-04-14 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Broadcom Search vendor "Broadcom" | Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup" | 9.01 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "9.01" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup" | 11.1 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "11.1" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Arcserve Backup Search vendor "Broadcom" for product "Brightstor Arcserve Backup" | 11.5 Search vendor "Broadcom" for product "Brightstor Arcserve Backup" and version "11.5" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Arcserve Backup Laptops Desktops Search vendor "Broadcom" for product "Brightstor Arcserve Backup Laptops Desktops" | 11.0 Search vendor "Broadcom" for product "Brightstor Arcserve Backup Laptops Desktops" and version "11.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Arcserve Backup Laptops Desktops Search vendor "Broadcom" for product "Brightstor Arcserve Backup Laptops Desktops" | 11.1 Search vendor "Broadcom" for product "Brightstor Arcserve Backup Laptops Desktops" and version "11.1" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Portal Search vendor "Broadcom" for product "Brightstor Portal" | 11.1 Search vendor "Broadcom" for product "Brightstor Portal" and version "11.1" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Process Automation Manager Search vendor "Broadcom" for product "Brightstor Process Automation Manager" | 11.1 Search vendor "Broadcom" for product "Brightstor Process Automation Manager" and version "11.1" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor San Manager Search vendor "Broadcom" for product "Brightstor San Manager" | 11.1 Search vendor "Broadcom" for product "Brightstor San Manager" and version "11.1" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor San Manager Search vendor "Broadcom" for product "Brightstor San Manager" | 11.5 Search vendor "Broadcom" for product "Brightstor San Manager" and version "11.5" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Storage Resource Manager Search vendor "Broadcom" for product "Brightstor Storage Resource Manager" | 6.3 Search vendor "Broadcom" for product "Brightstor Storage Resource Manager" and version "6.3" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Storage Resource Manager Search vendor "Broadcom" for product "Brightstor Storage Resource Manager" | 6.4 Search vendor "Broadcom" for product "Brightstor Storage Resource Manager" and version "6.4" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Storage Resource Manager Search vendor "Broadcom" for product "Brightstor Storage Resource Manager" | 11.1 Search vendor "Broadcom" for product "Brightstor Storage Resource Manager" and version "11.1" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Brightstor Storage Resource Manager Search vendor "Broadcom" for product "Brightstor Storage Resource Manager" | 11.5 Search vendor "Broadcom" for product "Brightstor Storage Resource Manager" and version "11.5" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Etrust Admin Search vendor "Broadcom" for product "Etrust Admin" | 8.1 Search vendor "Broadcom" for product "Etrust Admin" and version "8.1" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Etrust Audit Aries Search vendor "Broadcom" for product "Etrust Audit Aries" | 8.0 Search vendor "Broadcom" for product "Etrust Audit Aries" and version "8.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Etrust Audit Irecorder Search vendor "Broadcom" for product "Etrust Audit Irecorder" | 1.5 Search vendor "Broadcom" for product "Etrust Audit Irecorder" and version "1.5" | sp2 |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Etrust Audit Irecorder Search vendor "Broadcom" for product "Etrust Audit Irecorder" | 1.5 Search vendor "Broadcom" for product "Etrust Audit Irecorder" and version "1.5" | sp3 |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Etrust Audit Irecorder Search vendor "Broadcom" for product "Etrust Audit Irecorder" | 8.0 Search vendor "Broadcom" for product "Etrust Audit Irecorder" and version "8.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Etrust Identity Minder Search vendor "Broadcom" for product "Etrust Identity Minder" | 8.0 Search vendor "Broadcom" for product "Etrust Identity Minder" and version "8.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Etrust Integrated Threat Management Search vendor "Broadcom" for product "Etrust Integrated Threat Management" | 8.0 Search vendor "Broadcom" for product "Etrust Integrated Threat Management" and version "8.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Itechnology Igateway Search vendor "Broadcom" for product "Itechnology Igateway" | <= 4.0.050615 Search vendor "Broadcom" for product "Itechnology Igateway" and version " <= 4.0.050615" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Unicenter Asset Portfolio Management Search vendor "Broadcom" for product "Unicenter Asset Portfolio Management" | 11.0 Search vendor "Broadcom" for product "Unicenter Asset Portfolio Management" and version "11.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Unicenter Autosys Jm Search vendor "Broadcom" for product "Unicenter Autosys Jm" | 11.0 Search vendor "Broadcom" for product "Unicenter Autosys Jm" and version "11.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Unicenter Service Delivery Search vendor "Broadcom" for product "Unicenter Service Delivery" | 11.0 Search vendor "Broadcom" for product "Unicenter Service Delivery" and version "11.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Unicenter Service Desk Search vendor "Broadcom" for product "Unicenter Service Desk" | 11.0 Search vendor "Broadcom" for product "Unicenter Service Desk" and version "11.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Unicenter Service Desk Knowledge Tools Search vendor "Broadcom" for product "Unicenter Service Desk Knowledge Tools" | 11.0 Search vendor "Broadcom" for product "Unicenter Service Desk Knowledge Tools" and version "11.0" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Unicenter Service Fulfillment Search vendor "Broadcom" for product "Unicenter Service Fulfillment" | 2.2 Search vendor "Broadcom" for product "Unicenter Service Fulfillment" and version "2.2" | - |
Affected
| ||||||
| Broadcom Search vendor "Broadcom" | Unicenter Service Metric Analysis Search vendor "Broadcom" for product "Unicenter Service Metric Analysis" | 11.0 Search vendor "Broadcom" for product "Unicenter Service Metric Analysis" and version "11.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Brightstor Arcserve Backup Search vendor "Ca" for product "Brightstor Arcserve Backup" | 11 Search vendor "Ca" for product "Brightstor Arcserve Backup" and version "11" | windows |
Affected
| ||||||
| Ca Search vendor "Ca" | Brightstor Enterprise Backup Search vendor "Ca" for product "Brightstor Enterprise Backup" | 10.0 Search vendor "Ca" for product "Brightstor Enterprise Backup" and version "10.0" | solaris |
Affected
| ||||||
| Ca Search vendor "Ca" | Brightstor Enterprise Backup Search vendor "Ca" for product "Brightstor Enterprise Backup" | 10.5 Search vendor "Ca" for product "Brightstor Enterprise Backup" and version "10.5" | solaris |
Affected
| ||||||
| Ca Search vendor "Ca" | Brightstor Enterprise Backup Search vendor "Ca" for product "Brightstor Enterprise Backup" | 10.5 Search vendor "Ca" for product "Brightstor Enterprise Backup" and version "10.5" | tru64 |
Affected
| ||||||
| Ca Search vendor "Ca" | Brightstor Enterprise Backup Search vendor "Ca" for product "Brightstor Enterprise Backup" | 10.5 Search vendor "Ca" for product "Brightstor Enterprise Backup" and version "10.5" | windows_64-bit |
Affected
| ||||||
| Ca Search vendor "Ca" | Etrust Audit Aries Search vendor "Ca" for product "Etrust Audit Aries" | 1.5 Search vendor "Ca" for product "Etrust Audit Aries" and version "1.5" | sp2 |
Affected
| ||||||
| Ca Search vendor "Ca" | Etrust Audit Aries Search vendor "Ca" for product "Etrust Audit Aries" | 1.5 Search vendor "Ca" for product "Etrust Audit Aries" and version "1.5" | sp3 |
Affected
| ||||||
| Ca Search vendor "Ca" | Etrust Directory Search vendor "Ca" for product "Etrust Directory" | 8.1_web_components Search vendor "Ca" for product "Etrust Directory" and version "8.1_web_components" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Etrust Secure Content Manager Search vendor "Ca" for product "Etrust Secure Content Manager" | 8.0 Search vendor "Ca" for product "Etrust Secure Content Manager" and version "8.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Application Performance Monitor Search vendor "Ca" for product "Unicenter Application Performance Monitor" | 11.0 Search vendor "Ca" for product "Unicenter Application Performance Monitor" and version "11.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Application Server Managment Search vendor "Ca" for product "Unicenter Application Server Managment" | 11.0 Search vendor "Ca" for product "Unicenter Application Server Managment" and version "11.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Ca Web Services Distributed Management Search vendor "Ca" for product "Unicenter Ca Web Services Distributed Management" | 11.0 Search vendor "Ca" for product "Unicenter Ca Web Services Distributed Management" and version "11.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Exchange Management Console Search vendor "Ca" for product "Unicenter Exchange Management Console" | 11.0 Search vendor "Ca" for product "Unicenter Exchange Management Console" and version "11.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Management Search vendor "Ca" for product "Unicenter Management" | 3.5 Search vendor "Ca" for product "Unicenter Management" and version "3.5" | websphere_mq |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Management Search vendor "Ca" for product "Unicenter Management" | 11.0 Search vendor "Ca" for product "Unicenter Management" and version "11.0" | weblogic |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Management Search vendor "Ca" for product "Unicenter Management" | 11.0 Search vendor "Ca" for product "Unicenter Management" and version "11.0" | websphere |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Service Catalog Fulfillment Accounting Search vendor "Ca" for product "Unicenter Service Catalog Fulfillment Accounting" | 11.0 Search vendor "Ca" for product "Unicenter Service Catalog Fulfillment Accounting" and version "11.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Service Fulfillment Search vendor "Ca" for product "Unicenter Service Fulfillment" | 11.0 Search vendor "Ca" for product "Unicenter Service Fulfillment" and version "11.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Service Level Management Search vendor "Ca" for product "Unicenter Service Level Management" | 11.0 Search vendor "Ca" for product "Unicenter Service Level Management" and version "11.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Web Server Management Search vendor "Ca" for product "Unicenter Web Server Management" | 11.0 Search vendor "Ca" for product "Unicenter Web Server Management" and version "11.0" | - |
Affected
| ||||||
| Ca Search vendor "Ca" | Unicenter Web Services Distributed Management Search vendor "Ca" for product "Unicenter Web Services Distributed Management" | 11.0 Search vendor "Ca" for product "Unicenter Web Services Distributed Management" and version "11.0" | - |
Affected
| ||||||