CVE-2005-3653

Description

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

Related CPE's

References

20060123 Computer Associates iTechnology iGateway Service Content-Length Buffer Overflow

http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778

22688

16354

1015526

18591

http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp

380

ADV-2006-0311

20060123 CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability

ca-igateway-contentlength-bo(24269)

20060123 CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability

20060127 CAID 33778 - CA iGateway Content-Length Buffer Overflow Vulnerability [v1.1]

CvssV3 impact

CvssV2 impact