Published: 28/07/2011 Updated: 07/11/2023

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 890

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 prior to 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote malicious users to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ca gateway security 8.1
broadcom total defense r12

CWE-119 http://securitytracker.com/id?1025812 http://secunia.com/advisories/45332 http://www.securityfocus.com/bid/48813 http://www.zerodayinitiative.com/advisories/ZDI-11-237/http://securitytracker.com/id?1025813 http://securityreason.com/securityalert/8316 https://exchange.xforce.ibmcloud.com/vulnerabilities/68736 http://www.securityfocus.com/archive/1/518935/100/0/threaded http://www.securityfocus.com/archive/1/518934/100/0/threaded https://support.ca.com/irj/portal/anonymous/phpsupcontent?contentID=%7B5E404992-6B58-4C44-A29D-027D05B6285D%7D https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2011-2667

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect