NetSight
IP …
critical10.0

CVE-2005-3653

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows…

Impact

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

Affected products

VendorProductAffected versions
BroadcomBrightstor Arcserve Backup
Versions 9.01, 11.1, 11.5
BroadcomBrightstor Arcserve Backup Laptops Desktops
Versions 11.0, 11.1
BroadcomBrightstor Portal
Version 11.1
BroadcomBrightstor Process Automation Manager
Version 11.1
BroadcomBrightstor San Manager
Versions 11.1, 11.5
BroadcomBrightstor Storage Resource Manager
Versions 6.3, 6.4, 11.1, 11.5
BroadcomEtrust Admin
Version 8.1
BroadcomEtrust Audit Aries
Version 8.0
BroadcomEtrust Audit Irecorder
Versions 1.5, 8.0
BroadcomEtrust Identity Minder
Version 8.0
BroadcomEtrust Integrated Threat Management
Version 8.0
BroadcomItechnology Igateway
through 4.0.050615

Weakness classification

CWE-119

References