CVE-2011-2667
Publicada em · Atualizada em
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 16%
probabilidade de exploração
16%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.
Produtos afetados
n/a · n/aReferências
http://secunia.com/advisories/45332http://securityreason.com/securityalert/8316http://securitytracker.com/id?1025812http://securitytracker.com/id?1025813https://exchange.xforce.ibmcloud.com/vulnerabilities/68736https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B5E404992-6B58-4C44-A29D-027D05B6285D%7Dhttp://www.securityfocus.com/archive/1/518934/100/0/threadedhttp://www.securityfocus.com/archive/1/518935/100/0/threadedhttp://www.securityfocus.com/bid/48813http://www.zerodayinitiative.com/advisories/ZDI-11-237/