NVD

Id
9409  
Name
CVE-2011-2667  
Description
Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-07-28  
Modified Date
2011-09-21  
Seq
2011-2667  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53666 9409 CVE-2011-2667 8316  View
53667 9409 CVE-2011-2667 1025812  View
53668 9409 CVE-2011-2667 1025813  View
53669 9409 CVE-2011-2667 20110720 ZDI-11-237: CA Total Defense Suite Gateway Security Malformed HTTP Packet Remote Code Execution Vulnerability  View
53670 9409 CVE-2011-2667 20110720 CA20110720-01: Security Notice for CA Gateway Security and Total Defense  View
53671 9409 CVE-2011-2667 48813  View
53672 9409 CVE-2011-2667 http://www.zerodayinitiative.com/advisories/ZDI-11-237/  View
53673 9409 CVE-2011-2667 totaldefense-gateway-url-code-execution(68736)  View
53674 9409 CVE-2011-2667 https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID={5E404992-6B58-4C44-A29D-027D05B6285D}  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34527 JVNDB-2011-004769 CA Gateway Security および CA Total Defense で使用されている CA Gateway Security for HTTP の Icihttp.exe における任意のコードを実行される脆弱性 CA Gateway Security および CA Total Defense で使用されている CA Gateway Security for HTTP の Icihttp.exe は、URL を適切に構文解析しないため、任意のコードを実行される、またはサービス運用妨害 (ヒープメモリ破損およびデーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2011-2667 50574 CVE-2011-2667 9409 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004769.html 2011-07-20 2012-03-27 View