CVE-2005-0581
MEDIUM 4.6EPSS 46.3%
Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format.
- CVSS v2.0 NVD
- 4.6 MEDIUM
AV:L/AC:L/Au:N/C:P/I:P/A:P - EPSS
- 46.34% chance of exploitation in the next 30 days, 99th percentile
- Published
- 2005-03-02
- Updated
- 2024-08-07
Metasploit modules (3)
- rapid7/metasploit-framework/blob/master/modules/exploits/windows/license/calicserv_getcon…
- rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/license_gcr.rb
- rapid7/metasploit-framework/blob/master/modules/exploits/windows/license/calicclnt_getcon…
ExploitDB entries (4)
- https://www.exploit-db.com/exploits/16745
- https://www.exploit-db.com/exploits/16744
- https://www.exploit-db.com/exploits/16414
- https://www.exploit-db.com/exploits/859
Security advisories
- http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp
- http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities
- http://www.idefense.com/application/poi/display?id=213&type=vulnerabilities
- http://www.idefense.com/application/poi/display?id=214&type=vulnerabilities
- http://www.idefense.com/application/poi/display?id=215&type=vulnerabilities