Vulnerability-Lookup

CERTA-2007-AVI-331

Vulnerability from certfr_avis - Published: 2007-07-25 - Updated: 2007-07-25

Une vulnérabilité dans CA Message Queuing permet à une personne malintentionnée d'exécuter du code arbitraire à distance.

Description

Une vulnérabilité de type débordement de mémoire a été identifiée dans plusieurs produits CA au niveau du serveur CA Message Queuing (CAM / CAFT). La faille est due à un mauvais traitement de paquets spécialement conçus envoyés vers le port 3104 TCP et peut être exploitée par un attaquant pour exécuter du code arbitraire à distance.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Les logiciels suivants sur Windows et Netware sont affectés :

Advantage Data Transport 3.0 ;
BrightStor SAN Manager 11.1, 11.5 ;
BrightStor Portal 11.1 ;
CleverPath OLAP 5.1 ;
CleverPath ECM 3.5 ;
CleverPath Predictive Analysis Server 2.0, 3.0 ;
CleverPath Aion 10.0 ;
eTrust Admin 2.01, 2.04, 2.07, 2.09, 8.0, 8.1 ;
Unicenter Application Performance Monitor 3.0, 3.5 ;
Unicenter Asset Management 3.1, 3.2, 3.2 SP1, 3.2 SP2, 4.0, 4.0 SP1 ;
Unicenter Data Transport Option 2.0 ;
Unicenter Enterprise Job Manager 1.0 SP1, 1.0 SP2 ;
Unicenter Jasmine 3.0 ;
Unicenter Management for WebSphere MQ 3.5 ;
Unicenter Management for Microsoft Exchange 4.0, 4.1 ;
Unicenter Management for Lotus Notes / Domino 4.0 ;
Unicenter Management for Web Servers 5, 5.01 ;
Unicenter NSM 3.0, 3.1 ;
Unicenter NSM Wireless Network Management Option 3.0 ;
Unicenter Remote Control 6.0, 6.0 SP1 ;
Unicenter Service Level Management 3.0, 3.0.1, 3.0.2, 3.5 ;
Unicenter Software Delivery 3.0, 3.1, 3.1 SP1, 3.1 SP2, 4.0, 4.0 SP1 ;
Unicenter TNG 2.1, 2.2, 2.4, 2.4.2 ;
Unicenter TNG JPN 2.2.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

CVE-2007-0060 (GCVE-0-2007-0060)

Vulnerability from cvelistv5 – Published: 2007-07-26 00:00 – Updated: 2024-08-07 12:03

Summary

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

Severity

No CVSS data available.

CWE

Assigner

mitre mitre root Scorecard

References

9 references

URL	Tags
http://supportconnectw.ca.com/public/dto_transpor…	x_refsource_CONFIRM
http://www.vupen.com/english/advisories/2007/2638	vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilit…	vdb-entryx_refsource_XF
http://www.securitytracker.com/id?1018449	vdb-entryx_refsource_SECTRACK
http://secunia.com/advisories/26190	third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/archive/1/474602/100…	mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/25051	vdb-entryx_refsource_BID
http://www.iss.net/threats/272.html	third-party-advisoryx_refsource_ISS
http://www.ca.com/us/securityadvisor/newsinfo/col…	x_refsource_CONFIRM

Date Public

2007-07-24 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T12:03:36.982Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp"
          },
          {
            "name": "ADV-2007-2638",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2007/2638"
          },
          {
            "name": "systems-management-bo(32234)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32234"
          },
          {
            "name": "1018449",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://www.securitytracker.com/id?1018449"
          },
          {
            "name": "26190",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/26190"
          },
          {
            "name": "20070725 [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/archive/1/474602/100/0/threaded"
          },
          {
            "name": "25051",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/25051"
          },
          {
            "name": "20070724 CA Message Queuing Server (Cam.exe) Overflow",
            "tags": [
              "third-party-advisory",
              "x_refsource_ISS",
              "x_transferred"
            ],
            "url": "http://www.iss.net/threats/272.html"
          },
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2007-07-24T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-16T14:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp"
        },
        {
          "name": "ADV-2007-2638",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2007/2638"
        },
        {
          "name": "systems-management-bo(32234)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32234"
        },
        {
          "name": "1018449",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://www.securitytracker.com/id?1018449"
        },
        {
          "name": "26190",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/26190"
        },
        {
          "name": "20070725 [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://www.securityfocus.com/archive/1/474602/100/0/threaded"
        },
        {
          "name": "25051",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/25051"
        },
        {
          "name": "20070724 CA Message Queuing Server (Cam.exe) Overflow",
          "tags": [
            "third-party-advisory",
            "x_refsource_ISS"
          ],
          "url": "http://www.iss.net/threats/272.html"
        },
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2007-0060",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp",
              "refsource": "CONFIRM",
              "url": "http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp"
            },
            {
              "name": "ADV-2007-2638",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2007/2638"
            },
            {
              "name": "systems-management-bo(32234)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/32234"
            },
            {
              "name": "1018449",
              "refsource": "SECTRACK",
              "url": "http://www.securitytracker.com/id?1018449"
            },
            {
              "name": "26190",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/26190"
            },
            {
              "name": "20070725 [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability",
              "refsource": "BUGTRAQ",
              "url": "http://www.securityfocus.com/archive/1/474602/100/0/threaded"
            },
            {
              "name": "25051",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/25051"
            },
            {
              "name": "20070724 CA Message Queuing Server (Cam.exe) Overflow",
              "refsource": "ISS",
              "url": "http://www.iss.net/threats/272.html"
            },
            {
              "name": "http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809",
              "refsource": "CONFIRM",
              "url": "http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2007-0060",
    "datePublished": "2007-07-26T00:00:00.000Z",
    "dateReserved": "2007-01-04T00:00:00.000Z",
    "dateUpdated": "2024-08-07T12:03:36.982Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.

Action not permitted