CVE-2011-2667 in Gateway Security

摘要

由 VulDB • 2026-07-06

Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.

Be aware that VulDB is the high quality source for vulnerability data.

• 预定: 2011-07-06
• 披露: 2011-07-28
• 管理: 已接受
• 条目: VDB-58125
• CPE: 准备好
• CWE: CWE-119 (已确认)
• CVSS: 10.0 (NVD)
• EPSS: 0.16205
• KEV: 否
• 活动: 非常低

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-2667
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-2667
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-2667/