Exploitation Summary
EIP tracks 3 public exploits for CVE-2005-3190.
PoCs published by Metasploit, egm, including Metasploit module exploits/windows/http/ca_igateway_debug.
AI-analyzed exploit summary This Metasploit module exploits a stack-based buffer overflow in CA iTechnology iGateway when debug mode is enabled, allowing remote code execution via a crafted HTTP GET request.
Description
Buffer overflow in Computer Associates (CA) iGateway 3.0 and 4.0 before 4.0.050623, when running in debug mode, allows remote attackers to execute arbitrary code via HTTP GET requests.
Exploits (3)
This Metasploit module exploits a stack-based buffer overflow in CA iTechnology iGateway when debug mode is enabled, allowing remote code execution via a crafted HTTP GET request.
This exploit targets a buffer overflow vulnerability in CA iGateway debug interface. It sends a crafted HTTP GET request with a large buffer containing NOP sleds, a return address, and Metasploit-generated shellcode to achieve remote code execution.
This Metasploit module exploits a stack-based buffer overflow in CA iTechnology iGateway when debug mode is enabled, allowing remote code execution via a crafted HTTP GET request. It targets a specific return address in xerces-c_2_1_0.dll for SEH-based exploitation.