PT-2005-3557 · Computer Associates · Message Queuing

Published 2005-08-23 · Updated 2021-04-14 · CVE-2005-2669

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Computer Associates (CA) Message Queuing (CAM / CAFT) versions 1.05, 1.07 before Build 220 13, and 1.11 before Build 29 13

Description The issue allows remote attackers to execute arbitrary commands via spoofed CAFT packets.

Recommendations For version 1.05, update to a version after 1.05 to resolve the issue. For version 1.07 before Build 220 13, update to Build 220 13 or later to resolve the issue. For version 1.11 before Build 29 13, update to Build 29 13 or later to resolve the issue.

Fix

Related Identifiers

CVE-2005-2669

Affected Products

Message Queuing

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2005-2669 · Security Note
• http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919 · Vendor Advisory
• http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp · Vendor Advisory
• http://vupen.com/english/advisories/2005/1482 · Note
• http://osvdb.org/18917 · Note
• http://securityfocus.com/bid/14623 · Note
• https://t.me/cvenotify/12863 · Telegram Post
• http://secunia.com/advisories/16513 · Note