PT-2005-4008 · Ca · Ca Igateway

Emendoza · Published 2005-10-13 · Updated 2021-04-09 · CVE-2005-3190

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions CA iGateway versions 3.0 through 4.0 before 4.0.050623

Description A buffer overflow issue exists when CA iGateway runs in debug mode, allowing remote attackers to execute arbitrary code via HTTP GET requests.

Recommendations For CA iGateway versions 3.0 through 4.0 before 4.0.050623, update to version 4.0.050623 or later to resolve the issue. As a temporary workaround, consider disabling debug mode until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-3190

Affected Products

Ca Igateway

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ca_igateway_debug.rb · Exploit
• 🔥 https://exploit-db.com/exploits/1243 · Exploit
• 🔥 https://exploit-db.com/exploits/16801 · Exploit
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33485 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3190 · Security Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0418.html · Note
• http://secunia.com/advisories/17085 · Note
• http://securityfocus.com/bid/15025 · Note
• http://securityreason.com/securityalert/86 · Note
• http://securitytracker.com/id?1015045 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22560 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0349.html · Note
• http://osvdb.org/19920 · Note