CVE-2007-0060

Опубликовано: 26 июл. 2007

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

Ссылки

http://secunia.com/advisories/26190
Third Party Advisory
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
Vendor Advisory
http://www.iss.net/threats/272.html
Broken Link
http://www.securityfocus.com/archive/1/474602/100/0/threaded
http://www.securityfocus.com/bid/25051
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018449
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/2638
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32234
Third Party Advisory
VDB Entry
http://secunia.com/advisories/26190
Third Party Advisory
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
Vendor Advisory
http://www.iss.net/threats/272.html
Broken Link
http://www.securityfocus.com/archive/1/474602/100/0/threaded
http://www.securityfocus.com/bid/25051
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018449
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/2638
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32234
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:brightstor_san_manager:11.5:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_nsm_wireless_network_management_option:3.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:*

cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:*

cpe:2.3:a:ca:etrust_admin:2.1:*:*:*:*:*:*:*

cpe:2.3:a:ca:etrust_admin:2.4:*:*:*:*:*:*:*

cpe:2.3:a:ca:etrust_admin:2.7:*:*:*:*:*:*:*

cpe:2.3:a:ca:etrust_admin:2.9:*:*:*:*:*:*:*

cpe:2.3:a:ca:unicenter_asset_management:4.0:sp1:*:*:*:*:*:*

cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp1:*:*:*:*:*:*

cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp2:*:*:*:*:*:*

cpe:2.3:a:ca:unicenter_management:4.0:*:lotus_notes_domino:*:*:*:*:*

cpe:2.3:a:ca:unicenter_management:4.0:*:microsoft_exchange:*:*:*:*:*

cpe:2.3:a:ca:unicenter_management:4.1:*:microsoft_exchange:*:*:*:*:*

cpe:2.3:a:ca:unicenter_management:5.0:*:web_servers:*:*:*:*:*

cpe:2.3:a:ca:unicenter_management:5.0.1:*:web_servers:*:*:*:*:*

cpe:2.3:a:ca:unicenter_software_delivery:4.0:sp1:*:*:*:*:*:*

cpe:2.3:a:ca:unicenter_tng:2.2:*:*:ja:*:*:*:*

EPSS

Процентиль: 96%

0.21172

Средний

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-4c4h-q562-34mm

github

почти 4 года назад