CVE-2005-1693
Last modified
CVE-2005-1693 is a vulnerability of currently unknown severity. Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow.. EPSS estimates a 6.89% chance of exploitation in the next 30 days.
Description
Integer overflow in Computer Associates Vet Antivirus library, as used by CA InoculateIT 6.0, eTrust Antivirus r6.0 through 7.1, eTrust Antivirus for the Gateway r7.0 and r7.1, eTrust Secure Content Manager, eTrust Intrusion Detection, BrightStor ARCserve Backup (BAB) r11.1, Vet Antivirus, Zonelabs ZoneAlarm Security Suite, and ZoneAlarm Antivirus, allows remote attackers to gain privileges via a compressed VBA directory with a project name length of -1, which leads to a heap-based buffer overflow.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Broadcom | Etrust Antivirus | 6.0 | — |
| Broadcom | Etrust Antivirus | 7.0 | — |
| Broadcom | Etrust Antivirus | 7.1 | — |
| Broadcom | Etrust Antivirus Ee | 6.0 | — |
| Broadcom | Etrust Antivirus Ee | 7.0 | — |
| Broadcom | Etrust Ez Armor | 1.0 | — |
| Broadcom | Etrust Ez Armor | 2.0 | — |
| Broadcom | Etrust Ez Armor | 2.3 | — |
| Broadcom | Etrust Ez Armor | 2.4 | — |
| Broadcom | Etrust Ez Armor | 2.4.4 | — |
| Broadcom | Etrust Ez Armor Le | 2.0 | — |
| Broadcom | Etrust Ez Armor Le | 3.0.0.14 | — |
| Broadcom | Etrust Intrusion Detection | 1.4.1.13 | — |
| Broadcom | Etrust Intrusion Detection | 1.4.5 | — |
| Broadcom | Etrust Intrusion Detection | 1.5 | — |
| Broadcom | Etrust Intrusion Detection | 3.0 | — |
| Broadcom | Etrust Secure Content Manager | 1.0 | — |
| Broadcom | Etrust Secure Content Manager | 1.1 | — |
| Broadcom | Inoculateit | 6.0 | — |
| Ca | Brightstor Arcserve Backup | 11.1 | — |
| Ca | Etrust Antivirus | 7.0 | — |
| Ca | Etrust Antivirus | 7.0_sp2 | — |
| Ca | Etrust Antivirus | 7.1 | — |
| Ca | Etrust Intrusion Detection | 3.0 | Sp1 |
| Ca | Etrust Secure Content Manager | 1.0 | Sp1 |
| Ca | Vet Antivirus | 10.66 | — |
| Zonelabs | Zonealarm | All versions | — |
| Zonelabs | Zonealarm Antivirus | All versions | — |
References
- http://www.securityfocus.com/bid/13710Vendor Advisory
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32896Patch, Vendor Advisory
- http://www.securityfocus.com/bid/13710Vendor Advisory
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32896Patch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-1693?
How severe is CVE-2005-1693?
How do I fix CVE-2005-1693?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-1687SQL injection vulnerability in wp-trackback.php in Wordpress…
- CVE-2005-1688Wordpress 1.5 and earlier allows remote attackers to obtain …5.3
- CVE-2005-1689Double free vulnerability in the krb5_recvauth function in M…9.8
- CVE-2005-1690Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2005-1691Directory traversal vulnerability in Internet Graphics Serve…
- CVE-2005-1692Format string vulnerability in gxine 0.4.1 through 0.4.4, an…
- CVE-2005-1694Multiple SQL injection vulnerabilities in Xanthia.php in the…
- CVE-2005-1695Multiple cross-site scripting (XSS) vulnerabilities in the R…
- CVE-2005-1696Multiple cross-site scripting (XSS) vulnerabilities in PostN…
- CVE-2005-1697The RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allows…
- CVE-2005-1698PostNuke 0.750 and 0.760RC3 allows remote attackers to obtai…
- CVE-2005-1699Directory traversal vulnerability in pnadminapi.php in the X…
Are you affected by CVE-2005-1693?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST