9.3

CVE-2007-0060

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Broadcom ≫ Brightstor Portal Version 11.1
Broadcom ≫ Brightstor San Manager Version 11.1
Broadcom ≫ Brightstor San Manager Version 11.5
Broadcom ≫ Cleverpath Aion Version 10.0
Broadcom ≫ Cleverpath Ecm Version 3.5
Broadcom ≫ Cleverpath Olap Version 5.1
Broadcom ≫ Etrust Admin Version 8.0
Broadcom ≫ Etrust Admin Version 8.1
Broadcom ≫ Unicenter Asset Management Version 3.2 Update sp1
Broadcom ≫ Unicenter Asset Management Version 3.2 Update sp2
Broadcom ≫ Unicenter Jasmine Version 3.0
Broadcom ≫ Unicenter Remote Control Version 6.0 Update sp1
Broadcom ≫ Unicenter Software Delivery Version 3.1 Update sp1
Broadcom ≫ Unicenter Software Delivery Version 3.1 Update sp2
Broadcom ≫ Unicenter Tng Version 2.1
Broadcom ≫ Unicenter Tng Version 2.2
Broadcom ≫ Unicenter Tng Version 2.4
Broadcom ≫ Unicenter Tng Version 2.4.2
Ca ≫ Etrust Admin Version 2.1
Ca ≫ Etrust Admin Version 2.4
Ca ≫ Etrust Admin Version 2.7
Ca ≫ Etrust Admin Version 2.9
Ca ≫ Unicenter Asset Management Version 4.0 Update sp1
Ca ≫ Unicenter Enterprise Job Manager Version 1.0 Update sp1
Ca ≫ Unicenter Enterprise Job Manager Version 1.0 Update sp2
Ca ≫ Unicenter Management Version 4.0 Edition lotus_notes_domino
Ca ≫ Unicenter Management Version 4.0 Edition microsoft_exchange
Ca ≫ Unicenter Management Version 4.1 Edition microsoft_exchange
Ca ≫ Unicenter Management Version 5.0 Edition web_servers
Ca ≫ Unicenter Management Version 5.0.1 Edition web_servers
Ca ≫ Unicenter Software Delivery Version 4.0 Update sp1
Ca ≫ Unicenter Tng Version 2.2 Lang ja
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 23.64% 0.975
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/advisories/26190
Third Party Advisory
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
Vendor Advisory
http://www.iss.net/threats/272.html
Broken Link
http://www.securityfocus.com/archive/1/474602/100/0/threaded
http://www.securityfocus.com/bid/25051
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1018449
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/2638
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32234
Third Party Advisory
VDB Entry