← Database

CVE-2005-3653

CRITICAL CVSS: 10.0 Published: 2005-12-31 Modified: 2026-06-16

Description

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

Affected Platforms

Broadcom Unicenter Service FulfillmentCa Unicenter Service Level ManagementCa Etrust DirectoryCa Unicenter Web Server ManagementCa Unicenter Service FulfillmentCa Etrust Audit AriesBroadcom Unicenter Asset Portfolio ManagementBroadcom Brightstor San ManagerCa Etrust Secure Content ManagerBroadcom Unicenter Service Desk Knowledge Tools

Weakness Type

CWE-119

References