Unscored severity · published Jul 26, 2007
CVE-2007-0060
Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows…
–
CVSS
23.6%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.
Exploitation
Is it being used?
Exploit prediction (EPSS)23.6% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Advantage Data Transport · Broadcom
3.0 · source: NVD
BP
Brightstor Portal · Broadcom
11.1 · source: NVD
BS
Brightstor San Manager · Broadcom
11.1; 11.5 · source: NVD
CA
Cleverpath Aion · Broadcom
10.0 · source: NVD
CE
Cleverpath Ecm · Broadcom
3.5 · source: NVD
CO
Cleverpath Olap · Broadcom
5.1 · source: NVD
CP
Cleverpath Predictive Analysis Server · Broadcom
2.0; 3.0 · source: NVD
EA
Etrust Admin · Broadcom
8.0; 8.1 · source: NVD
UA
Unicenter Application Performance Monitor · Broadcom
3.0; 3.5 · source: NVD
UA
Unicenter Asset Management · Broadcom
3.1; 3.2; 3.2; 3.2; 4.0 · source: NVD
UD
Unicenter Data Transport Option · Broadcom
2.0 · source: NVD
UE
Unicenter Enterprise Job Manager · CA
1.0; 1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-0060
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-0060
Third Party Advisory
http://secunia.com/advisories/26190
Vendor Advisory
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
Broken Link
http://www.iss.net/threats/272.html
www.securityfocus.com
http://www.securityfocus.com/archive/1/474602/100/0/threaded
Third Party Advisory
http://www.securityfocus.com/bid/25051
More from Advantage Data Transport
–
CVE-2005-2667
Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows attackers to cause a denial of…
–
CVE-2005-2668
Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute…
–
CVE-2005-2669
Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed…