CVE-2007-1005

Heap-based buffer overflow in SW3eng.exe in the eID Engine service in CA (formerly Computer Associates) eTrust Intrusion Detection 3.0.5.57 and earlier allows remote attackers to cause a denial of service (application crash) via a long key length value to the remote administration port (9191/tcp).

• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=484Patch, Vendor Advisory
• http://secunia.com/advisories/24309Patch, Vendor Advisory
• http://supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.aspPatch, Vendor Advisory
• http://www.osvdb.org/32290
• http://www.securityfocus.com/archive/1/461567/100/100/threaded
• http://www.securityfocus.com/bid/22743Patch
• http://www.securitytracker.com/id?1017706
• http://www.vupen.com/english/advisories/2007/0776
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=484Patch, Vendor Advisory
• http://secunia.com/advisories/24309Patch, Vendor Advisory
• http://supportconnectw.ca.com/public/ca_common_docs/eid_secnotice.aspPatch, Vendor Advisory
• http://www.osvdb.org/32290
• http://www.securityfocus.com/archive/1/461567/100/100/threaded
• http://www.securityfocus.com/bid/22743Patch
• http://www.securitytracker.com/id?1017706
• http://www.vupen.com/english/advisories/2007/0776

Published

Mar 2, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-10002A vulnerability, which was classified as critical, has been …9.8
• CVE-2007-10003A vulnerability, which was classified as critical, has been …8.8
• CVE-2007-1001Multiple integer overflows in the (1) createwbmp and (2) rea…
• CVE-2007-1002Format string vulnerability in the write_html function in ca…
• CVE-2007-1003Integer overflow in ALLOCATE_LOCAL in the ProcXCMiscGetXIDLi…
• CVE-2007-1004Mozilla Firefox might allow remote attackers to conduct spoo…
• CVE-2007-1006Multiple format string vulnerabilities in the gm_main_window…
• CVE-2007-1007Format string vulnerability in GnomeMeeting 1.0.2 and earlie…
• CVE-2007-1008Apple iTunes 7.0.2 allows user-assisted remote attackers to …
• CVE-2007-1009Macrovision InstallAnywhere Enterprise before 8.0.1 uses the…
• CVE-2007-1010Multiple PHP remote file inclusion vulnerabilities in ZebraF…
• CVE-2007-1011PHP remote file inclusion vulnerability in functions_inc.php…