CVE-2011-2667 in the critical feed json
Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly…
published 2011-07-28 15 y ago modified 2026-06-16 4 mo ago also EUVD-2011-2650
- cvss
- 10.0
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 16.2%
- EPSS 16.2% chance of exploitation in 30 days, percentile 96%
- public exploits
- 0
- none known
Summary
Icihttp.exe in CA Gateway Security for HTTP, as used in CA Gateway Security 8.1 before 8.1.0.69 and CA Total Defense r12, does not properly parse URLs, which allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption and daemon crash) via a malformed request.
Exploit prediction
16.20% chance of exploitation in the next 30 days, higher than 96% of all scored CVEs (FIRST EPSS, 2026-11-09).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Classification
- Weakness
-
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer
References
-
secunia.com
/advisories/45332
third-party-advisory, vendor-advisory
- zerodayinitiative.com /advisories/ZDI-11-237/
-
securityfocus.com
/archive/1/518935/100/0/threaded
mailing-list
-
securitytracker.com
/id?1025812
vdb-entry
-
securityreason.com
/securityalert/8316
third-party-advisory
-
securityfocus.com
/archive/1/518934/100/0/threaded
mailing-list
-
securityfocus.com
/bid/48813
vdb-entry
-
exchange.xforce.ibmcloud.com
/vulnerabilities/68736
vdb-entry
- support.ca.com /irj/portal/anonymous/phpsupcontent?contentID=%7B5E404992-6B58-4C44-A29D-027D05B6285D%7D
-
securitytracker.com
/id?1025813
vdb-entry
Sources
- CVE List CVE-2011-2667
- NVD CVE-2011-2667
Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.