CVE-2007-0060 Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in...
HighCVSS 9.3
EPSS 23.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom advantage data transport | = 3.0 | No fix listed |
| broadcom brightstor portal | = 11.1 | No fix listed |
| broadcom brightstor san manager | = 11.1 | No fix listed |
| broadcom brightstor san manager | = 11.5 | No fix listed |
| broadcom cleverpath aion | = 10.0 | No fix listed |
| broadcom cleverpath ecm | = 3.5 | No fix listed |
| broadcom cleverpath olap | = 5.1 | No fix listed |
| broadcom cleverpath predictive analysis server | = 2.0 | No fix listed |
| broadcom cleverpath predictive analysis server | = 3.0 | No fix listed |
| broadcom etrust admin | = 8.0 | No fix listed |
| broadcom etrust admin | = 8.1 | No fix listed |
| broadcom unicenter application performance monitor | = 3.0 | No fix listed |
| broadcom unicenter application performance monitor | = 3.5 | No fix listed |
| broadcom unicenter asset management | = 3.1 | No fix listed |
| broadcom unicenter asset management | = 3.2 | No fix listed |
| broadcom unicenter asset management | = 3.2-sp1 | No fix listed |
| broadcom unicenter asset management | = 3.2-sp2 | No fix listed |
| broadcom unicenter asset management | = 4.0 | No fix listed |
| broadcom unicenter data transport option | = 2.0 | No fix listed |
| broadcom unicenter jasmine | = 3.0 | No fix listed |
| broadcom unicenter network and systems management | = 3.0 | No fix listed |
| broadcom unicenter network and systems management | = 3.1 | No fix listed |
| broadcom unicenter nsm wireless network management option | = 3.0 | No fix listed |
| broadcom unicenter remote control | = 6.0 | No fix listed |
| broadcom unicenter remote control | = 6.0-sp1 | No fix listed |
Show 26 more
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom unicenter service level management | = 3.0 | No fix listed |
| broadcom unicenter service level management | = 3.0.1 | No fix listed |
| broadcom unicenter service level management | = 3.0.2 | No fix listed |
| broadcom unicenter service level management | = 3.5 | No fix listed |
| broadcom unicenter software delivery | = 3.0 | No fix listed |
| broadcom unicenter software delivery | = 3.1 | No fix listed |
| broadcom unicenter software delivery | = 3.1-sp1 | No fix listed |
| broadcom unicenter software delivery | = 3.1-sp2 | No fix listed |
| broadcom unicenter software delivery | = 4.0 | No fix listed |
| broadcom unicenter tng | = 2.1 | No fix listed |
| broadcom unicenter tng | = 2.2 | No fix listed |
| broadcom unicenter tng | = 2.4 | No fix listed |
| broadcom unicenter tng | = 2.4.2 | No fix listed |
| ca etrust admin | = 2.1 | No fix listed |
| ca etrust admin | = 2.4 | No fix listed |
| ca etrust admin | = 2.7 | No fix listed |
| ca etrust admin | = 2.9 | No fix listed |
| ca unicenter asset management | = 4.0-sp1 | No fix listed |
| ca unicenter enterprise job manager | = 1.0-sp1 | No fix listed |
| ca unicenter enterprise job manager | = 1.0-sp2 | No fix listed |
| ca unicenter management | = 4.0 | No fix listed |
| ca unicenter management | = 4.1 | No fix listed |
| ca unicenter management | = 5.0 | No fix listed |
| ca unicenter management | = 5.0.1 | No fix listed |
| ca unicenter software delivery | = 4.0-sp1 | No fix listed |
| ca unicenter tng | = 2.2 | No fix listed |
References
- 26190 third-party-advisory
- supportconnectw.ca.com vendor-advisory
- www.ca.com vendor-advisory
- 20070724 CA Message Queuing Server (Cam.exe) Overflow broken-link third-party-advisory
- 20070725 [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability mailing-list
- 25051 third-party-advisory vdb-entry
- 1018449 third-party-advisory vdb-entry
- ADV-2007-2638 third-party-advisory vdb-entry
- systems-management-bo(32234) third-party-advisory vdb-entry