CVE-2005-3653: Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology product...

Security readout for executives and security teams

CVE-2005-3653 is a remote code execution issue in CA iTechnology iGateway. A malformed HTTP request with a negative Content-Length value could trigger a heap buffer overflow. The bundle identifies iGateway before 4.0.051230, but does not enumerate all CA products using it or show active exploitation. Exposure is most likely on legacy CA iTechnology deployments where the iGateway service is installed and reachable over a network. Internet-facing or broadly reachable management services create higher business risk. Evidence is incomplete for specific bundled CA products. Treat as high priority for legacy environments. The issue is old but severe: reachable vulnerable services may allow system compromise. Prioritize inventory, isolation, and upgrade or retirement of affected iGateway installations. Mitigation focus: Upgrade iTechnology iGateway to 4.0.051230 or later where still supported.; Review original CA guidance for product-specific update or replacement instructions.; Restrict network access to any iGateway service to trusted management hosts..

Prepared

Jun 29, 2026, 15:05 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.