Info

Disclosure

Oct 10, 2005

Discovery

Oct 06, 2005

Dates

Exploit

Oct 17, 2005

Solution

Unknown

Description

A remote overflow exists in Computer Associates iGateway. The application fails to perform proper bounds checking resulting in a buffer overflow. With a specially crafted HTTP GET request, a remote attacker can cause arbitrary code execution with SYSTEM privileges resulting in a loss of integrity.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Available
Disclosure: OSVDB Verified
OSVDB: Web Related

Solution

Upgrade to version 4.0.050623 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Computer Associates International, Inc.	iGateway	4.0
		3.0

References

Generic Exploit URL: http://www.metasploit.com/svn/framework3/trunk/modules/exploits/windows/http/ca_i ......
http://www.securiteam.com/exploits/6H0031PELC.html
Other Advisory URL: http://www3.ca.com/threatinfo/vulninfo/vuln.aspx?id=33485
ISS X-Force ID: 22560
Vendor Specific Advisory URL: http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33485
Secunia Advisory ID: 17085
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0349.html
http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0418.html
CVE ID: 2005-3190 (see also: NVD)
Security Tracker: 1015045
Vendor URL: http://www.ca.com/
Keyword: CAID 33485

Credit

Erika Mendoza -

Direct URL: http://osvdb.org/36218

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

Computer Associates International, Inc.

iGateway

References

Credit