PT-2005-4008 · Ca · Ca Igateway

Emendoza · Publicado 2005-10-13 · Atualizado 2021-04-09 · CVE-2005-3190

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CA iGateway versions 3.0 through 4.0 before 4.0.050623

Description A buffer overflow issue exists when CA iGateway runs in debug mode, allowing remote attackers to execute arbitrary code via HTTP GET requests.

Recommendations For CA iGateway versions 3.0 through 4.0 before 4.0.050623, update to version 4.0.050623 or later to resolve the issue. As a temporary workaround, consider disabling debug mode until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-3190

Produtos afetados

Ca Igateway

Referências · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ca_igateway_debug.rb · Exploit
• 🔥 https://exploit-db.com/exploits/1243 · Exploit
• 🔥 https://exploit-db.com/exploits/16801 · Exploit
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33485 · Aviso do Fabricante
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0418.html · Nota
• http://secunia.com/advisories/17085 · Nota
• http://securityfocus.com/bid/15025 · Nota
• http://securityreason.com/securityalert/86 · Nota
• http://securitytracker.com/id?1015045 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22560 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3190 · Nota de Segurança
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0349.html · Nota
• http://osvdb.org/19920 · Nota