PT-2005-3556 · Computer Associates · Message Queuing

Publicado 2005-08-23 · Atualizado 2021-04-14 · CVE-2005-2668

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Computer Associates (CA) Message Queuing (CAM / CAFT) versions 1.05, Computer Associates (CA) Message Queuing (CAM / CAFT) version 1.07 before Build 220 13, Computer Associates (CA) Message Queuing (CAM / CAFT) version 1.11 before Build 29 13

Description Multiple buffer overflows in Computer Associates (CA) Message Queuing allow remote attackers to execute arbitrary code via unknown vectors.

Recommendations For version 1.05, update to a version after 1.05 to resolve the issue. For version 1.07 before Build 220 13, update to Build 220 13 or later to resolve the issue. For version 1.11 before Build 29 13, update to Build 29 13 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-2668

Produtos afetados

Message Queuing

Referências · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/unicenter/cam_log_security.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16825 · Exploit
• http://kb.cert.org/vuls/id/619988 · Nota
• https://t.me/cvenotify/12864 · Publicação no Telegram
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/1482 · Nota
• http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp · Nota
• http://osvdb.org/18916 · Nota
• http://securityfocus.com/bid/14622 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2005-2668 · Nota de Segurança
• http://secunia.com/advisories/16513 · Nota