CVEvulnerability
CVE-2007-0060
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-07-26
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
Description
Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.
Affected configurations
• broadcom advantage data transport 3.0
• broadcom brightstor portal 11.1
• broadcom brightstor san manager 11.1
• broadcom brightstor san manager 11.5
• broadcom cleverpath aion 10.0
• broadcom cleverpath ecm 3.5
• broadcom cleverpath olap 5.1
• broadcom cleverpath predictive analysis server 2.0
• broadcom cleverpath predictive analysis server 3.0
• broadcom etrust admin 8.0
• broadcom etrust admin 8.1
• broadcom unicenter application performance monitor 3.0
• broadcom unicenter application performance monitor 3.5
• broadcom unicenter asset management 3.1
• broadcom unicenter asset management 3.2
• broadcom unicenter asset management 4.0
• broadcom unicenter data transport option 2.0
• broadcom unicenter jasmine 3.0
• broadcom unicenter network and systems management 3.0
• broadcom unicenter network and systems management 3.1
• broadcom unicenter nsm wireless network management option 3.0
• broadcom unicenter remote control 6.0
• broadcom unicenter service level management 3.0
• broadcom unicenter service level management 3.0.1
• broadcom unicenter service level management 3.0.2
• broadcom unicenter service level management 3.5
• broadcom unicenter software delivery 3.0
• broadcom unicenter software delivery 3.1
• broadcom unicenter software delivery 4.0
• broadcom unicenter tng 2.1
• broadcom unicenter tng 2.2
• broadcom unicenter tng 2.4
• broadcom unicenter tng 2.4.2
• ca etrust admin 2.1
• ca etrust admin 2.4
• ca etrust admin 2.7
• ca etrust admin 2.9
• ca unicenter asset management 4.0
• ca unicenter enterprise job manager 1.0
• ca unicenter management 4.0
• ca unicenter management 4.1
• ca unicenter management 5.0
• ca unicenter management 5.0.1
• ca unicenter software delivery 4.0
• ca unicenter tng 2.2
References
- http://secunia.com/advisories/26190 Third Party Advisory
- http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp Vendor Advisory
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 Vendor Advisory
- http://www.iss.net/threats/272.html Broken Link
- http://www.securityfocus.com/archive/1/474602/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25051 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018449 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/2638 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 Third Party Advisory, VDB Entry
- http://secunia.com/advisories/26190 Third Party Advisory
- http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp Vendor Advisory
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 Vendor Advisory
- http://www.iss.net/threats/272.html Broken Link
- http://www.securityfocus.com/archive/1/474602/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25051 Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1018449 Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2007/2638 Third Party Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 Third Party Advisory, VDB Entry