Lucene search

MitreCVE-2007-0060

HistoryJul 26, 2007 - 12:30 a.m.

CVE-2007-0060

2007-07-2600:30:00

mitre

web.nvd.nist.gov

cve-2007-0060

buffer overflow

message queuing

cam.exe

security vulnerability

remote code execution

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.919

Percentile

98.9%

JSON

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

Affected configurations

Nvd

Node

broadcomadvantage_data_transportMatch3.0

broadcombrightstor_portalMatch11.1

broadcombrightstor_san_managerMatch11.1

broadcombrightstor_san_managerMatch11.5

broadcomcleverpath_aionMatch10.0

broadcomcleverpath_ecmMatch3.5

broadcomcleverpath_olapMatch5.1

broadcomcleverpath_predictive_analysis_serverMatch2.0

broadcomcleverpath_predictive_analysis_serverMatch3.0

broadcometrust_adminMatch8.0

broadcometrust_adminMatch8.1

broadcomunicenter_application_performance_monitorMatch3.0

broadcomunicenter_application_performance_monitorMatch3.5

broadcomunicenter_asset_managementMatch3.1

broadcomunicenter_asset_managementMatch3.2

broadcomunicenter_asset_managementMatch3.2sp1

broadcomunicenter_asset_managementMatch3.2sp2

broadcomunicenter_asset_managementMatch4.0

broadcomunicenter_data_transport_optionMatch2.0

broadcomunicenter_jasmineMatch3.0

broadcomunicenter_network_and_systems_managementMatch3.0

broadcomunicenter_network_and_systems_managementMatch3.1

broadcomunicenter_nsm_wireless_network_management_optionMatch3.0

broadcomunicenter_remote_controlMatch6.0

broadcomunicenter_remote_controlMatch6.0sp1

broadcomunicenter_service_level_managementMatch3.0

broadcomunicenter_service_level_managementMatch3.0.1

broadcomunicenter_service_level_managementMatch3.0.2

broadcomunicenter_service_level_managementMatch3.5

broadcomunicenter_software_deliveryMatch3.0

broadcomunicenter_software_deliveryMatch3.1

broadcomunicenter_software_deliveryMatch3.1sp1

broadcomunicenter_software_deliveryMatch3.1sp2

broadcomunicenter_software_deliveryMatch4.0

broadcomunicenter_tngMatch2.1

broadcomunicenter_tngMatch2.2

broadcomunicenter_tngMatch2.4

broadcomunicenter_tngMatch2.4.2

caetrust_adminMatch2.1

caetrust_adminMatch2.4

caetrust_adminMatch2.7

caetrust_adminMatch2.9

caunicenter_asset_managementMatch4.0sp1

caunicenter_enterprise_job_managerMatch1.0sp1

caunicenter_enterprise_job_managerMatch1.0sp2

caunicenter_managementMatch4.0lotus_notes_domino

caunicenter_managementMatch4.0microsoft_exchange

caunicenter_managementMatch4.1microsoft_exchange

caunicenter_managementMatch5.0web_servers

caunicenter_managementMatch5.0.1web_servers

caunicenter_software_deliveryMatch4.0sp1

caunicenter_tngMatch2.2ja

VendorProductVersionCPE
broadcomadvantage_data_transport3.0cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:*
broadcombrightstor_portal11.1cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:*
broadcombrightstor_san_manager11.1cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:*
broadcombrightstor_san_manager11.5cpe:2.3:a:broadcom:brightstor_san_manager:11.5:*:*:*:*:*:*:*
broadcomcleverpath_aion10.0cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:*
broadcomcleverpath_ecm3.5cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:*
broadcomcleverpath_olap5.1cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:*
broadcomcleverpath_predictive_analysis_server2.0cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:*
broadcomcleverpath_predictive_analysis_server3.0cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:*
broadcometrust_admin8.0cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
broadcom	advantage_data_transport	3.0	cpe:2.3:a:broadcom:advantage_data_transport:3.0:::::::*
broadcom	brightstor_portal	11.1	cpe:2.3:a:broadcom:brightstor_portal:11.1:::::::*
broadcom	brightstor_san_manager	11.1	cpe:2.3:a:broadcom:brightstor_san_manager:11.1:::::::*
broadcom	brightstor_san_manager	11.5	cpe:2.3:a:broadcom:brightstor_san_manager:11.5:::::::*
broadcom	cleverpath_aion	10.0	cpe:2.3:a:broadcom:cleverpath_aion:10.0:::::::*
broadcom	cleverpath_ecm	3.5	cpe:2.3:a:broadcom:cleverpath_ecm:3.5:::::::*
broadcom	cleverpath_olap	5.1	cpe:2.3:a:broadcom:cleverpath_olap:5.1:::::::*
broadcom	cleverpath_predictive_analysis_server	2.0	cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:::::::*
broadcom	cleverpath_predictive_analysis_server	3.0	cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:::::::*
broadcom	etrust_admin	8.0	cpe:2.3:a:broadcom:etrust_admin:8.0:::::::*

Rows per page:

1-10 of 521

References

secunia.com/advisories/26190

supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp

www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809

www.iss.net/threats/272.html

www.securityfocus.com/archive/1/474602/100/0/threaded

www.securityfocus.com/bid/25051

www.securitytracker.com/id?1018449

www.vupen.com/english/advisories/2007/2638

exchange.xforce.ibmcloud.com/vulnerabilities/32234

Social References

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.919

Percentile

98.9%

JSON

Related for CVE-2007-0060