22688 : CA iGateway Service Content-Length Overflow
Printer | http://osvdb.org/22688 | Email This | Edit Vulnerability

Views This Week
65

Views All Time
227

Info

Last Modified
5 months ago

Percent Complete
100%

Disclosure
Jan 23, 2006

Discovery
Unknown

Dates

Exploit
Unknown

Solution
Unknown

Description

 A remote overflow exists in iGateway. The web server fails to properly validate the Content-Length header, resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary code to be executed, resulting in a loss of integrity and/or availability.

Classification

 Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Exploit: Exploit Unavailable
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

 Upgrade to version 4.0.051230 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products
Computer Associates International, Inc.
Watch-list
BrightStor ARCserve Backup (Windows)
Watch-list
 r11
BrightStor ARCServe Backup for Laptops & Desktops
Watch-list
 r11.1
r11
BrightStor ARCserve Backup
Watch-list
 r11.5
r11.1
BrightStor Enterprise Backup
Watch-list
 10.5
BrightStor Process Automation Manager
Watch-list
 r11.1
BrightStor SAN Manager
Watch-list
 r11.1
r11.5
BrightStor Storage Resource Manager
Watch-list
 r11.5
r11.1
6.4
6.3
BrightStor Portal
Watch-list
 11.1
eTrust Audit
Watch-list
 1.5 SP2
1.5 SP3
8.0
eTrust Admin
Watch-list
 8.1
eTrust Identity Minder
Watch-list
 8.0
eTrust Secure Content Manager (SCM)
Watch-list
 R8
eTrust Integrated Threat Management (ITM)
Watch-list
 R8
eTrust Directory
Watch-list
 R8.1
Unicenter CA Web Services Distributed Management
Watch-list
 r11.1
Unicenter AutoSys JM
Watch-list
 r11
Unicenter Management for WebLogic
Watch-list
 r11
Unicenter Management for WebSphere
Watch-list
 r11
Unicenter Service Delivery
Watch-list
 r11
Unicenter Service Level Management (USLM)
Watch-list
 r11
Unicenter Application Performance Monitor
Watch-list
 r11
Unicenter Service Desk
Watch-list
 r11
Unicenter Service Desk Knowledge Tools
Watch-list
 r11
Unicenter Asset Portfolio Management
Watch-list
 r11
Unicenter Service Catalog/Fulfillment/Accounting
Watch-list
 r11
Unicetner MQ Management
Watch-list
 r11
Unicenter Application Server Management
Watch-list
 r11
Unicenter Web Server Management
Watch-list
 r11
Unicenter Exchange Management
Watch-list
 r11
Service Metric Analysis
Watch-list
 r11
ARCserve Backup
Watch-list
 9.01

References

Tools & Filters

Nessus

 20805

Manual Testing Notes

Credit
  • Erika Mendoza -

Blogs

Provided by Technorati

 None found at this time

Comments

Add Comment

No Comments.

DONATE NOW!

User Status

Quick Searches

Advertisements

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.

© Copyright 2008 Open Source Vulnerability Database (OSVDB), All Rights Reserved.
Privacy Statement - Terms of Use