What’s Vulnerable › Vulnerabilities

CVE-2005-3653

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 18.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2005-12-31 · updated 2026-06-16
• Weakness: CWE-119

Description

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

Affected products

• Broadcom Brightstor Arcserve Backup: 9.01, 11.1, 11.5
• Broadcom Brightstor Arcserve Backup Laptops Desktops: 11.0, 11.1
• Broadcom Brightstor Portal: 11.1
• Broadcom Brightstor Process Automation Manager: 11.1
• Broadcom Brightstor San Manager: 11.1, 11.5
• Broadcom Brightstor Storage Resource Manager: 6.3, 6.4, 11.1, 11.5
• Broadcom Etrust Admin: 8.1
• Broadcom Etrust Audit Aries: 8.0
• Broadcom Etrust Audit Irecorder: 1.5-sp2, 1.5-sp3, 8.0
• Broadcom Etrust Identity Minder: 8.0
• Broadcom Etrust Integrated Threat Management: 8.0
• Broadcom Itechnology Igateway: through 4.0.050615
• Broadcom Unicenter Asset Portfolio Management: 11.0
• Broadcom Unicenter Autosys Jm: 11.0
• Broadcom Unicenter Service Delivery: 11.0
• Broadcom Unicenter Service Desk: 11.0
• Broadcom Unicenter Service Desk Knowledge Tools: 11.0
• Broadcom Unicenter Service Fulfillment: 2.2
• Broadcom Unicenter Service Metric Analysis: 11.0
• Ca Brightstor Arcserve Backup: 11
• Ca Brightstor Enterprise Backup: 10.0, 10.5
• Ca Etrust Audit Aries: 1.5-sp2, 1.5-sp3
• Ca Etrust Directory: 8.1_web_components
• Ca Etrust Secure Content Manager: 8.0
• Ca Unicenter Application Performance Monitor: 11.0
• Ca Unicenter Application Server Managment: 11.0
• Ca Unicenter Ca Web Services Distributed Management: 11.0
• Ca Unicenter Exchange Management Console: 11.0
• Ca Unicenter Management: 3.5, 11.0
• Ca Unicenter Service Catalog Fulfillment Accounting: 11.0

References

• http://marc.info/?l=full-disclosure&m=113803349715927&w=2
• http://secunia.com/advisories/18591
• http://securityreason.com/securityalert/380
• http://securitytracker.com/id?1015526
• http://supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp
• http://www.idefense.com/intelligence/vulnerabilities/display.php?id=376
• http://www.osvdb.org/22688
• http://www.securityfocus.com/archive/1/423288/100/0/threaded
• http://www.securityfocus.com/archive/1/423403/100/0/threaded
• http://www.securityfocus.com/bid/16354
• http://www.vupen.com/english/advisories/2006/0311
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778

Get alerted when CVE-2005-3653 or the next vulnerability affects your stack