VulnerabilityModified

CVE-2005-0581

MEDIUM 4.6EPSS 46.3%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 46.3%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format.

CVSS 2.0: 4.6 MEDIUMAV:L/AC:L/Au:N/C:P/I:P/A:P
EPSS: 46.34% probability · 99th percentile
CISA KEV: Not listed
Affected: broadcom/license software
Source: cve@mitre.org

References

http://marc.info/?l=bugtraq&m=110979326828704&w=2
http://supportconnectw.ca.com/public/ca_common_docs/security_notice.aspPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=210&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=213&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=214&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=215&type=vulnerabilitiesPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=110979326828704&w=2
http://supportconnectw.ca.com/public/ca_common_docs/security_notice.aspPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=210&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=213&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=214&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=215&type=vulnerabilitiesPatch, Vendor Advisory

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.