CVE-2005-3653
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA)...
CVE-2005-3653 is a high vulnerability (CVSS 10.0) in Broadcom Itechnology Igateway, published December 31, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 18.6%, the 97th percentile. No source names a fixed version.
- Severity
- 10.0 HighCVSS 2.0, NVD
- Exploit chance
- 18.6%EPSS, 97th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
Exploit likelihood
Affected products
- broadcom itechnology igateway
- broadcom brightstor arcserve backup
- broadcom brightstor arcserve backup laptops desktops
- broadcom brightstor portal
- broadcom brightstor process automation manager
- broadcom brightstor san manager
- broadcom brightstor storage resource manager
- broadcom etrust admin
- broadcom etrust audit aries
- broadcom etrust audit irecorder
- broadcom etrust identity minder
- broadcom etrust integrated threat management
Show 22 moreShow less
- broadcom unicenter asset portfolio management
- broadcom unicenter autosys jm
- broadcom unicenter service delivery
- broadcom unicenter service desk
- broadcom unicenter service desk knowledge tools
- broadcom unicenter service fulfillment
- broadcom unicenter service metric analysis
- ca brightstor arcserve backup
- ca brightstor enterprise backup
- ca etrust audit aries
- ca etrust directory
- ca etrust secure content manager
- ca unicenter application performance monitor
- ca unicenter application server managment
- ca unicenter ca web services distributed management
- ca unicenter exchange management console
- ca unicenter management
- ca unicenter service catalog fulfillment accounting
- ca unicenter service fulfillment
- ca unicenter service level management
- ca unicenter web server management
- ca unicenter web services distributed management
What each source reports
NVD Score used
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
- Record
CVE-2005-3653- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE ListNo score
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
- Record
CVE-2005-3653- Updated
- 2026-11-02
EUVDEUVD-2005-3650No score
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
- Record
EUVD-2005-3650- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pqwm-v5fq-x4gmNo score
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA)...
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
- Record
GHSA-pqwm-v5fq-x4gm- Weakness
- CWE-119
- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securitytracker.com/id?1015526
marc.info?l=full-disclosure&m=113803349715927&w=2
osvdb.org/22688
secunia.com/advisories/18591
securityfocus.com/bid/16354
www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33778
Show 9 moreShow less
securityreason.com/securityalert/380
exchange.xforce.ibmcloud.com/vulnerabilities/24269
vupen.com/english/advisories/2006/0311
idefense.com/intelligence/vulnerabilities/display.php?id=376
supportconnectw.ca.com/public/ca_common_docs/igatewaysecurity_notice.asp
nvd.nist.gov/vuln/detail/CVE-2005-3653
github.com/advisories/GHSA-pqwm-v5fq-x4gm