Lucene search

[email protected]CVE-2007-0060

HistoryJul 26, 2007 - 12:30 a.m.

CVE-2007-0060

2007-07-2600:30:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2007-0060

buffer overflow

message queuing

cam.exe

security vulnerability

remote code execution

nvd

8.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.919 High

EPSS

Percentile

98.9%

JSON

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

CPENameOperatorVersion
ca:unicenter_managementca unicenter managementeq4.1
ca:unicenter_asset_managementca unicenter asset managementeq4.0
ca:etrust_adminca etrust admineq2.1
ca:unicenter_software_deliveryca unicenter software deliveryeq4.0
ca:unicenter_managementca unicenter managementeq5.0.1
ca:unicenter_enterprise_job_managerca unicenter enterprise job managereq1.0
ca:etrust_adminca etrust admineq2.9
ca:etrust_adminca etrust admineq2.4
ca:unicenter_managementca unicenter managementeq4.0
ca:etrust_adminca etrust admineq2.7

CPE	Name	Operator	Version
ca:unicenter_management	ca unicenter management	eq	4.1
ca:unicenter_asset_management	ca unicenter asset management	eq	4.0
ca:etrust_admin	ca etrust admin	eq	2.1
ca:unicenter_software_delivery	ca unicenter software delivery	eq	4.0
ca:unicenter_management	ca unicenter management	eq	5.0.1
ca:unicenter_enterprise_job_manager	ca unicenter enterprise job manager	eq	1.0
ca:etrust_admin	ca etrust admin	eq	2.9
ca:etrust_admin	ca etrust admin	eq	2.4
ca:unicenter_management	ca unicenter management	eq	4.0
ca:etrust_admin	ca etrust admin	eq	2.7

Rows per page:

1-10 of 451

References

secunia.com/advisories/26190

supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp

www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809

www.iss.net/threats/272.html

www.securityfocus.com/archive/1/474602/100/0/threaded

www.securityfocus.com/bid/25051

www.securitytracker.com/id?1018449

www.vupen.com/english/advisories/2007/2638

exchange.xforce.ibmcloud.com/vulnerabilities/32234

Social References

8.2 High

AI Score

Confidence

Low

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.919 High

EPSS

Percentile

98.9%

JSON

Related for CVE-2007-0060

cvelist1 securityvulns2 checkpoint_advisories1 prion1 nessus1