Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
CA Total Defense和Gateway Security远程代码执行漏洞
Vulnerability Description
Computer Associates Total Defense是集成了反病毒、反间谍、网关安全、主机入侵防护系统等网络安全服务为一体的多层防护系统。 Computer Associates Total Defense和Gateway Security中存在代码执行漏洞。此漏洞位于响应端口8080上的入站HTTP请求的Icihttp.exe模块(CA Gateway Security for HTTP)中。由于URL解析例程中的故障复制循环算法，远程未验证用户可能造成可利用的堆破坏条件，可造成在Gate
CVSS Information
N/A
Vulnerability Type
N/A