CVE Feed

    Dashboard / CVE / CVE-2007-0060

    CVE-2007-0060

    Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

    Published:Jul 26, 2007
    Last Modified:Apr 23, 2026
    EPS:Jul 26, 2007
    EPSS Score:0.21815
    CVSS Score:9.3

    Affected Products

    Vendor
    Broadcom
    Product
    Advantage Data Transport
    Vendor
    Broadcom
    Product
    Brightstor Portal
    Vendor
    Broadcom
    Product
    Brightstor San Manager
    Vendor
    Broadcom
    Product
    Cleverpath Aion
    Vendor
    Broadcom
    Product
    Cleverpath Ecm
    Vendor
    Broadcom
    Product
    Cleverpath Olap
    Vendor
    Broadcom
    Product
    Cleverpath Predictive Analysis Server
    Vendor
    Broadcom
    Product
    Etrust Admin
    Vendor
    Broadcom
    Product
    Unicenter Application Performance Monitor
    Vendor
    Broadcom
    Product
    Unicenter Asset Management
    Vendor
    Broadcom
    Product
    Unicenter Data Transport Option
    Vendor
    Broadcom
    Product
    Unicenter Jasmine
    Vendor
    Broadcom
    Product
    Unicenter Network And Systems Management
    Vendor
    Broadcom
    Product
    Unicenter Nsm Wireless Network Management Option
    Vendor
    Broadcom
    Product
    Unicenter Remote Control
    Vendor
    Broadcom
    Product
    Unicenter Service Level Management
    Vendor
    Broadcom
    Product
    Unicenter Software Delivery
    Vendor
    Broadcom
    Product
    Unicenter Tng
    Vendor
    Ca
    Product
    Etrust Admin
    Vendor
    Ca
    Product
    Unicenter Asset Management
    Vendor
    Ca
    Product
    Unicenter Enterprise Job Manager
    Vendor
    Ca
    Product
    Unicenter Management
    Vendor
    Ca
    Product
    Unicenter Software Delivery
    Vendor
    Ca
    Product
    Unicenter Tng

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    References

    http://secunia.com/advisories/26190
    http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
    http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
    http://www.iss.net/threats/272.html
    http://www.securityfocus.com/archive/1/474602/100/0/threaded
    http://www.securityfocus.com/bid/25051
    http://www.securitytracker.com/id?1018449
    http://www.vupen.com/english/advisories/2007/2638
    https://exchange.xforce.ibmcloud.com/vulnerabilities/32234
    http://secunia.com/advisories/26190
    http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
    http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
    http://www.iss.net/threats/272.html
    http://www.securityfocus.com/archive/1/474602/100/0/threaded
    http://www.securityfocus.com/bid/25051
    http://www.securitytracker.com/id?1018449
    http://www.vupen.com/english/advisories/2007/2638
    https://exchange.xforce.ibmcloud.com/vulnerabilities/32234

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High