CVE-2005-0581

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 46%

from disclosure to weapon4 days

Published on NVDMar 2

1st PoC+4d

metasploitMar 2

exploitation probability

46%top 1% of all CVEs

observed exploitation

nono source reports it

4 public exploit(s)

Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format.

Affected products

n/a · n/a

public PoCs found — 4

exploitdbwww.exploit-db.com/exploits/859unverified exploitdbwww.exploit-db.com/exploits/16744unverified exploitdbwww.exploit-db.com/exploits/16745unverified exploitdbwww.exploit-db.com/exploits/16414unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://marc.info/?l=bugtraq&m=110979326828704&w=2 http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp http://www.idefense.com/application/poi/display?id=210&type=vulnerabilities http://www.idefense.com/application/poi/display?id=213&type=vulnerabilities http://www.idefense.com/application/poi/display?id=214&type=vulnerabilities http://www.idefense.com/application/poi/display?id=215&type=vulnerabilities