CVE-2005-0581

MediumCVSS 4.6/10Last modified Jun 16, 2026

Description

Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR request, (2) a long IP address, hostname, or netmask values in a GCR request, (3) a long last parameter in a GETCONFIG packet, or (4) long values in a request with an invalid format.

Metrics

CVSS 2.0 4.6/10AV:L/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=110979326828704&w=2
http://supportconnectw.ca.com/public/ca_common_docs/security_notice.aspPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=210&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=213&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=214&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=215&type=vulnerabilitiesPatch, Vendor Advisory
http://marc.info/?l=bugtraq&m=110979326828704&w=2
http://supportconnectw.ca.com/public/ca_common_docs/security_notice.aspPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=210&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=213&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=214&type=vulnerabilitiesPatch, Vendor Advisory
http://www.idefense.com/application/poi/display?id=215&type=vulnerabilitiesPatch, Vendor Advisory

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-058210.0Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in CVE-2005-05835.0Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via CVE-2005-05842.6Firefox before 1.0.1 and Mozilla before 1.7.6, when displaying the HTTP Authentication dialog, do not change the focus to the tab that gener CVE-2005-05852.6Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to CVE-2005-05862.6Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to spoof the extensions of files to download via the Content CVE-2005-05876.5Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote malicious web sites to overwrite arbitrary files by tricking the user into downl CVE-2005-05885.0Firefox before 1.0.1 and Mozilla before 1.7.6 does not restrict xsl:include and xsl:import tags in XSLT stylesheets to the current domain, w CVE-2005-05895.0The Form Fill feature in Firefox before 1.0.1 allows remote attackers to steal potentially sensitive information via an input control that m CVE-2005-05905.0The installation confirmation dialog in Firefox before 1.0.1, Thunderbird before 1.0.1, and Mozilla before 1.7.6 allows remote attackers to CVE-2005-05912.6Firefox before 1.0.1 allows remote attackers to spoof the (1) security and (2) download modal dialog boxes, which could be used to trick use CVE-2005-05927.5Heap-based buffer overflow in the UTF8ToNewUnicode function for Firefox before 1.0.1 and Mozilla before 1.7.6 might allow remote attackers t CVE-2005-05932.6Firefox before 1.0.1 and Mozilla before 1.7.6 allows remote attackers to spoof the SSL "secure site" lock icon via (1) a web site that does