Quantum Secular Labs / Blog / Advisories

CVE-2005-3653: Broadcom Itechnology Igateway: Buffer overflow

CVE-2005-3653 has a CVSS v2 base score of 10.0 (the maximum on that scale) and affects Broadcom Itechnology Igateway, along with 33 other products in NVD’s configuration data. Per its scoring, it can be exploited over the network, without authentication. The scored impact on confidentiality, integrity and availability is the highest available.

Vulnerability description

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

Severity breakdown

CVSS v2.0 10.0: AV:N/AC:L/Au:N/C:C/I:C/A:C

  • Access vector: Network. Exploitable remotely over the network.
  • Access complexity: Low. No special conditions are required.
  • Authentication: None. No authentication is needed.
  • Confidentiality impact: Complete. Total information disclosure.
  • Integrity impact: Complete. Total loss of integrity.
  • Availability impact: Complete. Total shutdown of the component.

Underlying weakness

CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary.

Affected products

  • Broadcom Itechnology Igateway: up to and including 4.0.050615
  • Broadcom Brightstor Arcserve Backup: 9.01; 11.1; 11.5
  • Broadcom Brightstor Arcserve Backup Laptops Desktops: 11.0; 11.1
  • Broadcom Brightstor Portal: 11.1
  • Broadcom Brightstor Process Automation Manager: 11.1
  • Broadcom Brightstor San Manager: 11.1; 11.5
  • Broadcom Brightstor Storage Resource Manager: 6.3; 6.4; 11.1; 11.5
  • Broadcom Etrust Admin: 8.1
  • Broadcom Etrust Audit Aries: 8.0
  • Broadcom Etrust Audit Irecorder: 1.5 sp2; 1.5 sp3; 8.0
  • Broadcom Etrust Identity Minder: 8.0
  • Broadcom Etrust Integrated Threat Management: 8.0
  • Broadcom Unicenter Asset Portfolio Management: 11.0
  • Broadcom Unicenter Autosys Jm: 11.0
  • Broadcom Unicenter Service Delivery: 11.0

References