CVE-2005-3653
No fix known EPSS 19%
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
Products: broadcom brightstor_arcserve_backup, broadcom brightstor_arcserve_backup_laptops_desktops, broadcom brightstor_portal, broadcom brightstor_process_automation_manager, broadcom brightstor_san_manager, broadcom brightstor_storage_resource_manager, broadcom etrust_admin, broadcom etrust_audit_aries, broadcom etrust_audit_irecorder, broadcom etrust_identity_minder, broadcom etrust_integrated_threat_management, broadcom itechnology_igateway, broadcom unicenter_asset_portfolio_management, broadcom unicenter_autosys_jm, broadcom unicenter_service_delivery, broadcom unicenter_service_desk, broadcom unicenter_service_desk_knowledge_tools, broadcom unicenter_service_fulfillment, broadcom unicenter_service_metric_analysis, ca brightstor_arcserve_backup, ca brightstor_enterprise_backup, ca etrust_audit_aries, ca etrust_directory, ca etrust_secure_content_manager, unicenter_application_performance_monitor, unicenter_application_server_managment, unicenter_ca_web_services_distributed_management, ca unicenter_exchange_management_console, ca unicenter_management, unicenter_service_catalog_fulfillment_accounting, ca unicenter_service_fulfillment, ca unicenter_service_level_management, ca unicenter_web_server_management, ca unicenter_web_services_distributed_management