PT-2007-1553 · Ca · Message Queuing+5

Published 2007-07-26 · Updated 2021-04-14 · CVE-2007-0060

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions CA Message Queuing software versions prior to 1.11 Build 54 4

Description The issue is a stack-based buffer overflow in the Message Queuing Server (Cam.exe) that allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104. This affects various CA products, including CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products.

Recommendations For CA Message Queuing software versions prior to 1.11 Build 54 4, update to version 1.11 Build 54 4 or later to resolve the issue. As a temporary workaround, consider restricting access to TCP port 3104 to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-0060

Affected Products

Brightstor

Ca Advantage Data Transport

Message Queuing

Cleverpath

Unicenter

Etrust Admin

References · 11

• http://ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-0060 · Security Note
• http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp · Vendor Advisory
• http://secunia.com/advisories/26190 · Note
• http://securitytracker.com/id?1018449 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 · Note
• http://securityfocus.com/bid/25051 · Note
• http://vupen.com/english/advisories/2007/2638 · Note
• https://t.me/cvenotify/12860 · Telegram Post
• http://iss.net/threats/272.html · Note
• http://securityfocus.com/archive/1/474602/100/0/threaded · Note