CVE-2011-2667: Buffer Overflow
Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-2667?
CVE-2011-2667 is classified as a critical vulnerability due to its potential for arbitrary code execution and denial of service.
How do I fix CVE-2011-2667?
To fix CVE-2011-2667, upgrade CA Gateway Security to version 8.1.0.69 or later, or update Broadcom Total Defense to the latest available version.
What types of attacks can exploit CVE-2011-2667?
CVE-2011-2667 can be exploited through malformed HTTP requests that lead to heap memory corruption.
Which software is affected by CVE-2011-2667?
CVE-2011-2667 affects CA Gateway Security 8.1 before version 8.1.0.69 and CA Total Defense r12.
What are the consequences of exploiting CVE-2011-2667?
Exploiting CVE-2011-2667 could result in remote code execution or a denial of service, causing service disruptions.