CVE-2007-0060

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2007-0060
Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

9.3 /10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References
Link Resource
http://secunia.com/advisories/26190 Third Party Advisory
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 Vendor Advisory
http://www.iss.net/threats/272.html Broken Link
http://www.securityfocus.com/archive/1/474602/100/0/threaded
http://www.securityfocus.com/bid/25051 Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018449 Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/2638 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 Third Party Advisory VDB Entry
http://secunia.com/advisories/26190 Third Party Advisory
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 Vendor Advisory
http://www.iss.net/threats/272.html Broken Link
http://www.securityfocus.com/archive/1/474602/100/0/threaded
http://www.securityfocus.com/bid/25051 Third Party Advisory VDB Entry
http://www.securitytracker.com/id?1018449 Third Party Advisory VDB Entry
http://www.vupen.com/english/advisories/2007/2638 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 Third Party Advisory VDB Entry
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:brightstor_san_manager:11.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_nsm_wireless_network_management_option:3.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:*
cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:*
cpe:2.3:a:ca:etrust_admin:2.1:*:*:*:*:*:*:*
cpe:2.3:a:ca:etrust_admin:2.4:*:*:*:*:*:*:*
cpe:2.3:a:ca:etrust_admin:2.7:*:*:*:*:*:*:*
cpe:2.3:a:ca:etrust_admin:2.9:*:*:*:*:*:*:*
cpe:2.3:a:ca:unicenter_asset_management:4.0:sp1:*:*:*:*:*:*
cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp1:*:*:*:*:*:*
cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp2:*:*:*:*:*:*
cpe:2.3:a:ca:unicenter_management:4.0:*:lotus_notes_domino:*:*:*:*:*
cpe:2.3:a:ca:unicenter_management:4.0:*:microsoft_exchange:*:*:*:*:*
cpe:2.3:a:ca:unicenter_management:4.1:*:microsoft_exchange:*:*:*:*:*
cpe:2.3:a:ca:unicenter_management:5.0:*:web_servers:*:*:*:*:*
cpe:2.3:a:ca:unicenter_management:5.0.1:*:web_servers:*:*:*:*:*
cpe:2.3:a:ca:unicenter_software_delivery:4.0:sp1:*:*:*:*:*:*
cpe:2.3:a:ca:unicenter_tng:2.2:*:*:ja:*:*:*:*
History

21 Nov 2024, 00:24

Type Values Removed Values Added
References () http://secunia.com/advisories/26190 - Third Party Advisory () http://secunia.com/advisories/26190 - Third Party Advisory
References () http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp - Vendor Advisory () http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp - Vendor Advisory
References () http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 - Vendor Advisory () http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 - Vendor Advisory
References () http://www.iss.net/threats/272.html - Broken Link () http://www.iss.net/threats/272.html - Broken Link
References () http://www.securityfocus.com/archive/1/474602/100/0/threaded - () http://www.securityfocus.com/archive/1/474602/100/0/threaded -
References () http://www.securityfocus.com/bid/25051 - Third Party Advisory, VDB Entry () http://www.securityfocus.com/bid/25051 - Third Party Advisory, VDB Entry
References () http://www.securitytracker.com/id?1018449 - Third Party Advisory, VDB Entry () http://www.securitytracker.com/id?1018449 - Third Party Advisory, VDB Entry
References () http://www.vupen.com/english/advisories/2007/2638 - Third Party Advisory () http://www.vupen.com/english/advisories/2007/2638 - Third Party Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 - Third Party Advisory, VDB Entry () https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 - Third Party Advisory, VDB Entry
Information

Published : 2007-07-26 00:30

Updated : 2024-11-21 00:24

NVD link : CVE-2007-0060

Mitre link : CVE-2007-0060

CVE.ORG link : CVE-2007-0060

JSON object : View

Products Affected

broadcom

  • etrust_admin
  • brightstor_san_manager
  • unicenter_remote_control
  • cleverpath_ecm
  • unicenter_nsm_wireless_network_management_option
  • unicenter_application_performance_monitor
  • unicenter_service_level_management
  • unicenter_network_and_systems_management
  • cleverpath_olap
  • unicenter_software_delivery
  • unicenter_data_transport_option
  • unicenter_asset_management
  • brightstor_portal
  • unicenter_jasmine
  • cleverpath_predictive_analysis_server
  • advantage_data_transport
  • cleverpath_aion
  • unicenter_tng

ca

  • unicenter_management
  • unicenter_enterprise_job_manager
  • unicenter_software_delivery
  • unicenter_asset_management
  • unicenter_tng
  • etrust_admin
CWE
NVD-CWE-Other