CVE-2005-3190

Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33485	Vendor Advisory
http://securitytracker.com/id?1015045
http://www.securityfocus.com/bid/15025
http://secunia.com/advisories/17085
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0349.html
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0418.html
http://www.osvdb.org/19920
http://securityreason.com/securityalert/86
https://exchange.xforce.ibmcloud.com/vulnerabilities/22560

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:broadcom:igateway:3.0:::::::*
	cpe:2.3:a:broadcom:igateway:4.0:::::::*

Information

Published : 2005-10-13 15:02

Updated : 2021-04-09 09:56

NVD link : CVE-2005-3190

Mitre link : CVE-2005-3190

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

broadcom

igateway

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33485", "name": "http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33485", "tags": ["Vendor Advisory"], "refsource": "CONFIRM"}, {"url": "http://securitytracker.com/id?1015045", "name": "1015045", "tags": [], "refsource": "SECTRACK"}, {"url": "http://www.securityfocus.com/bid/15025", "name": "15025", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/17085", "name": "17085", "tags": [], "refsource": "SECUNIA"}, {"url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0349.html", "name": "20051014 CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability", "tags": [], "refsource": "FULLDISC"}, {"url": "http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0418.html", "name": "20051019 RE: CAID 33485 - Computer Associates iGateway debug mode HTTP GET request buffer overflow vulnerability", "tags": [], "refsource": "FULLDISC"}, {"url": "http://www.osvdb.org/19920", "name": "19920", "tags": [], "refsource": "OSVDB"}, {"url": "http://securityreason.com/securityalert/86", "name": "86", "tags": [], "refsource": "SREASON"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/22560", "name": "brightstor-igateway-http-get-bo(22560)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2005-3190", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": true, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2005-10-13T22:02Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:broadcom:igateway:3.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:broadcom:igateway:4.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-04-09T16:56Z"}