PT-2007-1553 · Ca · Message Queuing+5

Publicado 2007-07-26 · Atualizado 2021-04-14 · CVE-2007-0060

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA Message Queuing software versions prior to 1.11 Build 54 4

Description The issue is a stack-based buffer overflow in the Message Queuing Server (Cam.exe) that allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104. This affects various CA products, including CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products.

Recommendations For CA Message Queuing software versions prior to 1.11 Build 54 4, update to version 1.11 Build 54 4 or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 3104 to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-0060

Produtos afetados

Brightstor

Ca Advantage Data Transport

Message Queuing

Cleverpath

Unicenter

Etrust Admin

Referências · 11

• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 · Aviso do Fabricante
• http://secunia.com/advisories/26190 · Nota
• http://securitytracker.com/id?1018449 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 · Nota
• http://securityfocus.com/bid/25051 · Nota
• http://vupen.com/english/advisories/2007/2638 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0060 · Nota de Segurança
• https://t.me/cvenotify/12860 · Publicação no Telegram
• http://iss.net/threats/272.html · Nota
• http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp · Aviso do Fabricante
• http://securityfocus.com/archive/1/474602/100/0/threaded · Nota