CVE-2005-3190

Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

64.82% chance of exploitation in the next 30 days, 99th percentile

Published

2005-10-13

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ca_igateway_debug.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16801
• https://www.exploit-db.com/exploits/1243

Security advisories

• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33485
• http://www.securityfocus.com/bid/15025

References

• CVE Record
• NVD entry