PT-2005-3556 · Computer Associates · Message Queuing

Published 2005-08-23 · Updated 2021-04-14 · CVE-2005-2668

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Computer Associates (CA) Message Queuing (CAM / CAFT) versions 1.05, Computer Associates (CA) Message Queuing (CAM / CAFT) version 1.07 before Build 220 13, Computer Associates (CA) Message Queuing (CAM / CAFT) version 1.11 before Build 29 13

Description Multiple buffer overflows in Computer Associates (CA) Message Queuing allow remote attackers to execute arbitrary code via unknown vectors.

Recommendations For version 1.05, update to a version after 1.05 to resolve the issue. For version 1.07 before Build 220 13, update to Build 220 13 or later to resolve the issue. For version 1.11 before Build 29 13, update to Build 29 13 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2005-2668

Affected Products

Message Queuing

References · 11

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/unicenter/cam_log_security.rb · Exploit
• 🔥 https://exploit-db.com/exploits/16825 · Exploit
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919 · Vendor Advisory
• http://securityfocus.com/bid/14622 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-2668 · Security Note
• http://kb.cert.org/vuls/id/619988 · Note
• https://t.me/cvenotify/12864 · Telegram Post
• http://vupen.com/english/advisories/2005/1482 · Note
• http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp · Note
• http://osvdb.org/18916 · Note
• http://secunia.com/advisories/16513 · Note