Computer Associates Multiple Message Queuing Denial Of Service Vulnerabilities
BID:16475
Info
Computer Associates Multiple Message Queuing Denial Of Service Vulnerabilities
| Bugtraq ID: | 16475 |
| Class: | Unknown |
| CVE: |
CVE-2006-0529 CVE-2006-0530 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 02 2006 12:00AM |
| Updated: | Feb 07 2006 08:53PM |
| Credit: | Nicolas Pouvesle of Tenable Network Security is credited for the discovery of these issues. |
| Vulnerable: |
Computer Associates Unicenter TNG 2.4.2 Computer Associates Unicenter TNG 2.4 Computer Associates Unicenter TNG 2.2 Computer Associates Unicenter TNG 2.1 Computer Associates Unicenter Software Delivery 4.0 SP1 Computer Associates Unicenter Software Delivery 4.0 Computer Associates Unicenter Software Delivery 3.1 SP2 Computer Associates Unicenter Software Delivery 3.1 SP1 Computer Associates Unicenter Software Delivery 3.1 Computer Associates Unicenter Software Delivery 3.0 Computer Associates Unicenter Service Level Management 3.5 Computer Associates Unicenter Service Level Management 3.0.2 Computer Associates Unicenter Service Level Management 3.0.1 Computer Associates Unicenter Service Level Management 3.0 Computer Associates Unicenter Remote Control 6.0 SP1 Computer Associates Unicenter Remote Control 6.0 Computer Associates Unicenter NSM Wireless Network Management Option 3.0 Computer Associates Unicenter Network and Systems Management 3.1 Computer Associates Unicenter Network and Systems Management 3.0 Computer Associates Unicenter Management for WebSphere MQ 3.5 Computer Associates Unicenter Management for Web Servers 5.0.1 Computer Associates Unicenter Management for Web Servers 5.0 Computer Associates Unicenter Management for Microsoft Exchange 4.1 Computer Associates Unicenter Management for Microsoft Exchange 4.0 Computer Associates Unicenter Management for Lotus Notes/Domino 4.0 Computer Associates Unicenter Jasmine 3.0 Computer Associates Unicenter Enterprise Job Manager 1.0 SP2 Computer Associates Unicenter Enterprise Job Manager 1.0 SP1 Computer Associates Unicenter Data Transport Option 2.0 Computer Associates Unicenter Asset Management 4.0 SP1 Computer Associates Unicenter Asset Management 4.0 Computer Associates Unicenter Asset Management 3.2 SP2 Computer Associates Unicenter Asset Management 3.2 SP1 Computer Associates Unicenter Asset Management 3.2 Computer Associates Unicenter Asset Management 3.1 Computer Associates Unicenter Application Performance Monitor 3.5 Computer Associates Unicenter Application Performance Monitor 3.0 Computer Associates eTrust Admin 8.1 Computer Associates eTrust Admin 8.0 Computer Associates eTrust Admin 2.9 Computer Associates eTrust Admin 2.7 Computer Associates eTrust Admin 2.4 Computer Associates eTrust Admin 2.1 Computer Associates CleverPath Predictive Analysis Server 3.0 Computer Associates CleverPath Predictive Analysis Server 2.0 Computer Associates CleverPath OLAP 5.1 Computer Associates CleverPath ECM 3.5 Computer Associates CleverPath Aion 10.0 Computer Associates CAM 1.11 Build 29_13 Computer Associates CAM 1.11 Computer Associates CAM 1.07 Build 220_13 Computer Associates CAM 1.07 Computer Associates CAM 1.05 Computer Associates BrightStor SAN Manager 11.1 Computer Associates BrightStor SAN Manager 1.1 SP2 Computer Associates BrightStor SAN Manager 1.1 SP1 Computer Associates BrightStor SAN Manager 1.1 Computer Associates BrightStor Portal 11.1 Computer Associates Advantage Data Transport 3.0 |
| Not Vulnerable: |
Computer Associates CAM 1.11 Build 29_20 Computer Associates CAM 1.07 Build 220_16 |
Discussion
Computer Associates Multiple Message Queuing Denial Of Service Vulnerabilities
Computer Associates Message Queuing (CAM) is prone to two remote denial-of-service vulnerabilities. These issues arise because the application fails to properly handle certain unspecified malformed packets.
A remote attacker can exploit these vulnerabilities to deny service to legitimate users.
Computer Associates Message Queuing (CAM) is prone to two remote denial-of-service vulnerabilities. These issues arise because the application fails to properly handle certain unspecified malformed packets.
A remote attacker can exploit these vulnerabilities to deny service to legitimate users.
Exploit / POC
Computer Associates Multiple Message Queuing Denial Of Service Vulnerabilities
An exploit is not likely required.
An exploit is not likely required.
Solution / Fix
Computer Associates Multiple Message Queuing Denial Of Service Vulnerabilities
Solution:
The vendor has released an advisory, along with updates addressing these issues. Please see the referenced advisory for further information.
Computer Associates CAM 1.11
Computer Associates CAM 1.07
Computer Associates CAM 1.07 Build 220_13
Computer Associates CAM 1.05
Computer Associates CAM 1.11 Build 29_13
Solution:
The vendor has released an advisory, along with updates addressing these issues. Please see the referenced advisory for further information.
Computer Associates CAM 1.11
-
Computer Associates CAM v1.11 Build 29_20
http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_c am111fixes.asp
Computer Associates CAM 1.07
-
Computer Associates CAM v1.07 Build 220_16
http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_c am107fixes.asp
Computer Associates CAM 1.07 Build 220_13
-
Computer Associates CAM v1.07 Build 220_16
http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_c am107fixes.asp
Computer Associates CAM 1.05
-
Computer Associates CAM v1.07 Build 220_16
http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_c am107fixes.asp
Computer Associates CAM 1.11 Build 29_13
-
Computer Associates CAM v1.11 Build 29_20
http://supportconnectw.ca.com/public/ca_common_docs/camessagsecurity_c am111fixes.asp
References
Computer Associates Multiple Message Queuing Denial Of Service Vulnerabilities
References:
References:
- CA Message Queuing Security Notice (Computer Associates)
- Vendor Home Page (Computer Associates)
- CAID 33581 - CA Message Queuing Denial of Service Vulnerabilities ("Williams, James K"
)