CA Multiple Products Message Queuing Server (Cam.exe) Remote Overflow

The remote version of CA Message Queuing Service contains a stack overflow that may allow an attacker to execute arbitrary code on the remote host with SYSTEM privileges. An attacker does not need to be authenticated to exploit this flaw. C Tenable Network Security, Inc. vendor advisory: Affected...

CVE-2007-0060: Undefined Security Weakness

Stack-based buffer overflow in the Message Queuing Server Cam.exe in CA formerly Computer Associates Message Queuing CAM / CAFT software before 1.11 Build 544 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, an...

CVE-2007-0060

CA CVE-2007-0060 affects CA Message Queuing (CAM/CAFT) Server. A stack-based buffer overflow in CAM/CAFT before version 1.11 Build 54_4 on Windows/NetWare allows remote code execution by sending a crafted message to TCP port 3104. Impact described as remote arbitrary code execution with potential...

CVE-2007-0060

Stack-based buffer overflow in the Message Queuing Server Cam.exe in CA formerly Computer Associates Message Queuing CAM / CAFT software before 1.11 Build 544 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, an...

[Full-disclosure] [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CAID 35527: CA Message Queuing CAM / CAFT Buffer Overflow Vulnerability CA Vuln ID CAID: 35527 CA Advisory Date: 2007-07-24 Reported By: Paul Mehta of ISS X-Force Impact: A remote attacker can execute arbitrary code. Summary: Multiple CA produc...

CA multiple application buffer overflow

Buffer overflow in CA Message Queuing TCP/3104 service...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via 1 SYS.DBMSPRVTAQIS in the Advanced Queuing component DB02 and 2 MDSYS.MD in the Spatial component DB12. NOTE: Oracle has not disputed reliable...

CVE-2007-3854

CVE-2007-3854 affects Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5. The entry documents multiple unspecified vulnerabilities allowing remote authenticated users to impact system via two components: the Advanced Queuing component (DB02) and the Spatial component (DB12). The description notes th...

CVE-2007-3854

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via 1 SYS.DBMSPRVTAQIS in the Advanced Queuing component DB02 and 2 MDSYS.MD in the Spatial component DB12. NOTE: Oracle has not disputed reliable...

CVE-2007-3854: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5+, 9.2.0.7, and 10.1.0.5 allow remote authenticated users to have unknown impact via 1 SYS.DBMSPRVTAQIS in the Advanced Queuing component DB02 and 2 MDSYS.MD in the Spatial component DB12. NOTE: Oracle has not disputed reliable...

Microsoft Windows Message Queuing Service String Buffer Overflow (MS05-017; CVE-2005-0059; CVE-2007-3039)

...

CVE-2007-0268

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to 1 the Advanced Queuing component and sys.dbmsaqsys.dbmsaq privileges DB01, 2 Advanced Replication and sys.dbmsrepcatuntrusted DB07, and 3 Oracle Text and ctxloa...

Sql injection

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to 1 the Advanced Queuing component and sys.dbmsaqsys.dbmsaq privileges DB01, 2 Advanced Replication and sys.dbmsrepcatuntrusted DB07, and 3 Oracle Text and ctxloa...

CVE-2007-0268

CVE-2007-0268 affects Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5, with vulnerabilities in Advanced Queuing (sys.dbms_aqsys.dbms_aq privileges DB01), Advanced Replication (sys.dbms_repcat_untrusted DB07), and Oracle Text (ctxload DB15). The underlying impact/attack vectors are not fully detail...

CVE-2007-0268

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to 1 the Advanced Queuing component and sys.dbmsaqsys.dbmsaq privileges DB01, 2 Advanced Replication and sys.dbmsrepcatuntrusted DB07, and 3 Oracle Text and ctxloa...

CVE-2007-0268: Undefined Security Weakness

Multiple unspecified vulnerabilities in Oracle Database 9.0.1.5, 9.2.0.7, and 10.1.0.5 have unknown impact and attack vectors related to 1 the Advanced Queuing component and sys.dbmsaqsys.dbmsaq privileges DB01, 2 Advanced Replication and sys.dbmsrepcatuntrusted DB07, and 3 Oracle Text and ctxloa...

Microsoft Message Queuing buffer overflow

Added: 10/06/2006 CVE: CVE-2005-0059 BID: 13112 OSVDB: 15458 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow in Microsoft Message Queuing allows remote attackers to execute arbitrary...

Microsoft Message Queuing buffer overflow

Added: 10/06/2006 CVE: CVE-2005-0059 BID: 13112 OSVDB: 15458 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow in Microsoft Message Queuing allows remote attackers to execute arbitrary...

Microsoft Message Queuing buffer overflow

Added: 10/06/2006 CVE: CVE-2005-0059 BID: 13112 OSVDB: 15458 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow in Microsoft Message Queuing allows remote attackers to execute arbitrary...

Microsoft Message Queuing buffer overflow

Added: 10/06/2006 CVE: CVE-2005-0059 BID: 13112 OSVDB: 15458 Background Microsoft Message Queuing allows applications which may be running at different times to communicate across a network. Problem A buffer overflow in Microsoft Message Queuing allows remote attackers to execute arbitrary...