NetSight
IP …
critical9.3

CVE-2007-0060

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Buil…

Impact

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

Affected products

VendorProductAffected versions
BroadcomAdvantage Data Transport
Version 3.0
BroadcomBrightstor Portal
Version 11.1
BroadcomBrightstor San Manager
Versions 11.1, 11.5
BroadcomCleverpath Aion
Version 10.0
BroadcomCleverpath Ecm
Version 3.5
BroadcomCleverpath Olap
Version 5.1
BroadcomCleverpath Predictive Analysis Server
Versions 2.0, 3.0
BroadcomEtrust Admin
Versions 8.0, 8.1
BroadcomUnicenter Application Performance Monitor
Versions 3.0, 3.5
BroadcomUnicenter Asset Management
Versions 3.1, 3.2, 4.0
BroadcomUnicenter Data Transport Option
Version 2.0
BroadcomUnicenter Jasmine
Version 3.0

References