CVE-2005-3653
Severidad:
Pendiente de análisis
Type:
CWE-119
Restricción de operaciones inapropiada dentro de los límites del búfer de la memoria
Fecha de publicación:
31/12/2005
Última modificación:
14/04/2021
Descripción
*** Pendiente de traducción *** Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
Impacto
Puntuación base 2.0
10.00
Severidad 2.0
ALTA
Productos y versiones vulnerables
CPE | Desde | Hasta |
---|---|---|
cpe:2.3:a:broadcom:brightstor_arcserve_backup:9.01:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_arcserve_backup:11.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_arcserve_backup_laptops_desktops:11.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_process_automation_manager:11.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_san_manager:11.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_storage_resource_manager:6.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_storage_resource_manager:6.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_storage_resource_manager:11.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:brightstor_storage_resource_manager:11.5:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:broadcom:etrust_audit_aries:8.0:*:*:*:*:*:*:* |
Para consultar la lista completa de nombres de CPE con productos y versiones, ver esta página
Referencias a soluciones, herramientas e información
- http://marc.info/?l=full-disclosure&m=113803349715927&w=2
- http://secunia.com/advisories/18591
- http://securityreason.com/securityalert/380
- http://securitytracker.com/id?1015526=
- http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp
- http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376
- http://www.osvdb.org/22688
- http://www.securityfocus.com/archive/1/423288/100/0/threaded
- http://www.securityfocus.com/archive/1/423403/100/0/threaded
- http://www.securityfocus.com/bid/16354
- http://www.vupen.com/english/advisories/2006/0311
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24269