CVE-2005-2668

The CVE-2005-2668 entry concerns the Computer Associates Message Queuing (CAM) service within CA Unicenter. Public references describe multiple buffer-overflow flaws in CAM’s MQ component that can be triggered remotely to execute arbitrary code on Windows hosts. Documented vulnerable targets incl...

CVE-2005-2669

CVE-2005-2669 affects Computer Associates Message Queuing Service (CAM/CAFT): vulnerable in CAM versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13. The root cause is a stack overflow in the remote service’s log_security function, which may allow an unauthenticated attacker to ex...

CVE-2005-2667

CA Message Queuing Service (CAM/CAFT) remote vulnerability affects versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13. Astack overflow in the log_security function may allow remote arbitrary code execution, with additional denial-of-service impact on TCP port 4105. Some sources ...

CVE-2007-0060

CA CVE-2007-0060 affects CA Message Queuing (CAM/CAFT) Server. A stack-based buffer overflow in CAM/CAFT before version 1.11 Build 54_4 on Windows/NetWare allows remote code execution by sending a crafted message to TCP port 3104. Impact described as remote arbitrary code execution with potential...

CVE-2005-0640

CA Unicenter Asset Management (UAM) 4.0 contains a flaw where the "+Change Credentials for Database" window is not properly initialized, enabling local users to recover the SQL Admin password. The root cause is improper window initialization, per the CVE entry. The documented impact is partial co...

CVE-2005-0642

The CVE-2005-0642 issue affects CA Unicenter Asset Management (UAM) 4.0, specifically the Query Designer component. The vulnerability is a SQL injection that allows remote attackers to execute arbitrary SQL through an imported file. The root cause is improper handling of input in the Query Design...

CVE-2005-0641

CVE-2005-0641 affects the CA Unicenter Asset Management Reporter (UAM) 4.0, where a flaw in report templates (fields: name and description) enables cross-site scripting (XSS). The root cause is a vulnerability in how the report template content is handled, allowing remote attackers to inject arbi...