Broadcom License Software vulnerabilities

5 CVEs affecting Broadcom License Software, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2012-0692, published 2012-10-02.

More from Broadcom.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-0581, published 2005-05-02. Medium severity, CVSS 4.6. EPSS: 46.3% chance of exploitation in the next 30 days. Multiple buffer overflows in Computer Associates (CA) License Client and Server 0.1.0.15 allow remote attackers to execute arbitrary code via (1) certain long fields in the Checksum item in a GCR…
• CVE-2005-0582, published 2005-05-02. High severity, CVSS 10.0. EPSS: 37% chance of exploitation in the next 30 days. Buffer overflow in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to execute arbitrary code via a long filename in a PUTOLF request.
• CVE-2005-0583, published 2005-05-02. Medium severity, CVSS 5.0. EPSS: 3.8% chance of exploitation in the next 30 days. Directory traversal vulnerability in Computer Associates (CA) License Client 0.1.0.15 allows remote attackers to create arbitrary files via .. (dot dot) sequences in a PUTOLF request.
• CVE-2012-0692, published 2012-10-02. High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days. CA License (aka CA Licensing) before 1.90.03 allows local users to modify or create arbitrary files, and consequently gain privileges, via unspecified vectors.
• CVE-2012-0691, published 2012-10-02. High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days. CA License (aka CA Licensing) before 1.90.03 does not properly restrict system commands, which allows local users to gain privileges via unspecified vectors.