Vulnerabilities > Broadcom > Etrust Integrated Threat Management

DATE CVE VULNERABILITY TITLE RISK
2007-10-13 CVE-2007-5439 Permissions, Privileges, and Access Controls vulnerability in Broadcom Etrust Integrated Threat Management 8.1
CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 stores sensitive user information in log files with predictable names, which allows remote attackers to obtain this information via unspecified vectors.
network
low complexity
broadcom CWE-264
5.0
2007-10-13 CVE-2007-5437 Link Following vulnerability in Broadcom Etrust Integrated Threat Management 8.1
The web console in CA (formerly Computer Associates) eTrust ITM (Threat Manager) 8.1 allows remote attackers to redirect users to arbitrary web sites via a crafted HTTP URL on port 6689.
network
broadcom CWE-59
5.8
2007-05-11 CVE-2007-2522 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in Broadcom products
Stack-based buffer overflow in the inoweb Console Server in CA Anti-Virus for the Enterprise r8, Threat Manager r8, Anti-Spyware for the Enterprise r8, and Protection Suites r3 allows remote attackers to execute arbitrary code via a long (1) username or (2) password.
network
low complexity
broadcom CWE-119
critical
10.0
2005-12-31 CVE-2005-3653 Improper Restriction of Operations Within the Bounds of A Memory Buffer vulnerability in multiple products
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.
network
low complexity
broadcom ca CWE-119
critical
10.0