CVE-2011-2667

CriticalCVSS 10.0/10Last modified Jun 16, 2026

Description

Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-119

Affected software

No affected versions have been published.

Timeline

Published
Jul 28, 2011
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2011

CVE-2011-26688.8Mozilla Firefox through 1.5.0.3 has a vulnerability in processing the content-length headerCVE-2011-26696.5Mozilla Firefox prior to 3.6 has a DoS vulnerability due to an issue in the validation of certificates.CVE-2011-26706.1Mozilla Firefox before 3.6 is vulnerable to XSS via the rendering of Cascading Style SheetsCVE-2011-26717.5Unspecified vulnerability in Megalith 12th edition through 27th edition allows remote attackers to gain administrative privileges via unknowCVE-2011-26724.3Cross-site scripting (XSS) vulnerability in SemanticScuttle before 0.98 allows remote attackers to inject arbitrary web script or HTML via uCVE-2011-26734.3Cross-site scripting (XSS) vulnerability in BaserCMS before 1.6.13.2 allows remote attackers to inject arbitrary web script or HTML via unspCVE-2011-26744.9BaserCMS before 1.6.12 does not properly restrict additions to the membership of the operators group, which allows remote authenticated userCVE-2011-26754.3Cross-site scripting (XSS) vulnerability in Enkai-kun before 110916 allows remote attackers to inject arbitrary web script or HTML via unspeCVE-2011-26765.5The A-Form and A-Form bamboo before 1.3.6 and 2.x before 2.0.3, and A-Form PC and PC/Mobile before 3.1, plug-ins for Movable Type do not reqCVE-2011-26775.5Cybozu Office before 8.0.0 allows remote authenticated users to bypass intended access restrictions and access sensitive information (time cCVE-2011-26786.8The Cisco VPN Client 5.0.7.0240 and 5.0.7.0290 on 64-bit Windows platforms uses weak permissions (NT AUTHORITY\INTERACTIVE:F) for cvpnd.exe,CVE-2011-26794.3Cross-site scripting (XSS) vulnerability in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote attackers to inject arbitrary w
CVE-2011-2667: Critical severity, CVSS 10.0 | Vulnix