CVE-2005-3653: Broadcom Brightstor Arcserve Backup

High severity, CVSS 10.0. EPSS: 18.6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.

Affected products

Broadcom Brightstor Arcserve Backup: version 9.01 only; version 11.1 only; version 11.5 only
Broadcom Brightstor Arcserve Backup Laptops Desktops: version 11.0 only; version 11.1 only
Broadcom Brightstor Portal: version 11.1 only
Broadcom Brightstor Process Automation Manager: version 11.1 only
Broadcom Brightstor San Manager: version 11.1 only; version 11.5 only
Broadcom Brightstor Storage Resource Manager: version 6.3 only; version 6.4 only; version 11.1 only; version 11.5 only
Broadcom Etrust Admin: version 8.1 only
Broadcom Etrust Audit Aries: version 8.0 only
Broadcom Etrust Audit Irecorder: version 1.5 only; version 8.0 only
Broadcom Etrust Identity Minder: version 8.0 only
Broadcom Etrust Integrated Threat Management: version 8.0 only
Broadcom Itechnology Igateway: up to and including 4.0.050615
Broadcom Unicenter Asset Portfolio Management: version 11.0 only
Broadcom Unicenter Autosys Jm: version 11.0 only
Broadcom Unicenter Service Delivery: version 11.0 only
Broadcom Unicenter Service Desk: version 11.0 only
Broadcom Unicenter Service Desk Knowledge Tools: version 11.0 only
Broadcom Unicenter Service Fulfillment: version 2.2 only
Broadcom Unicenter Service Metric Analysis: version 11.0 only
Ca Brightstor Arcserve Backup: version 11 only
Ca Brightstor Enterprise Backup: version 10.0 only; version 10.5 only
Ca Etrust Audit Aries: version 1.5 only
Ca Etrust Directory: version 8.1_web_components only
Ca Etrust Secure Content Manager: version 8.0 only
Ca Unicenter Application Performance Monitor: version 11.0 only
and 9 more

Published 2005-12-31. Last modified 2026-06-16.