Computer Associates Multiple Products Message Queuing Remote Stack Buffer Overflow Vulnerability
BID:25051
Info
Computer Associates Multiple Products Message Queuing Remote Stack Buffer Overflow Vulnerability
| Bugtraq ID: | 25051 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2007-0060 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 24 2007 12:00AM |
| Updated: | Jul 27 2007 03:35PM |
| Credit: | Paul Mehta is credited with the discovery of this issue. |
| Vulnerable: |
Computer Associates Unicenter TNG 2.4.2 Computer Associates Unicenter TNG 2.4 Computer Associates Unicenter TNG 2.2 Computer Associates Unicenter TNG 2.1 Computer Associates Unicenter Software Delivery 4.0 SP1 Computer Associates Unicenter Software Delivery 4.0 Computer Associates Unicenter Software Delivery 3.1 SP2 Computer Associates Unicenter Software Delivery 3.1 SP1 Computer Associates Unicenter Software Delivery 3.1 Computer Associates Unicenter Software Delivery 3.0 Computer Associates Unicenter Service Level Management 3.5 Computer Associates Unicenter Service Level Management 3.0.2 Computer Associates Unicenter Service Level Management 3.0.1 Computer Associates Unicenter Service Level Management 3.0 Computer Associates Unicenter Remote Control 6.0 SP1 Computer Associates Unicenter Remote Control 6.0 Computer Associates Unicenter NSM Wireless Network Management Option 3.0 Computer Associates Unicenter Network and Systems Management 3.1 Computer Associates Unicenter Network and Systems Management 3.0 Computer Associates Unicenter Management for WebSphere MQ 3.5 Computer Associates Unicenter Management for Web Servers 5.0.1 Computer Associates Unicenter Management for Web Servers 5.0 Computer Associates Unicenter Management for Microsoft Exchange 4.1 Computer Associates Unicenter Management for Microsoft Exchange 4.0 Computer Associates Unicenter Management for Lotus Notes/Domino 4.0 Computer Associates Unicenter Jasmine 3.0 Computer Associates Unicenter Enterprise Job Manager 1.0 SP2 Computer Associates Unicenter Enterprise Job Manager 1.0 SP1 Computer Associates Unicenter Data Transport Option 2.0 Computer Associates Unicenter Asset Management 4.0 SP1 Computer Associates Unicenter Asset Management 4.0 Computer Associates Unicenter Asset Management 3.2 SP2 Computer Associates Unicenter Asset Management 3.2 SP1 Computer Associates Unicenter Asset Management 3.2 Computer Associates Unicenter Asset Management 3.1 Computer Associates Unicenter Application Performance Monitor 3.5 Computer Associates Unicenter Application Performance Monitor 3.0 Computer Associates eTrust Admin 8.1 Computer Associates eTrust Admin 8.0 Computer Associates eTrust Admin 2.09 Computer Associates eTrust Admin 2.07 Computer Associates eTrust Admin 2.04 Computer Associates eTrust Admin 2.01 Computer Associates CleverPath Predictive Analysis Server 3.0 Computer Associates CleverPath Predictive Analysis Server 2.0 Computer Associates CleverPath OLAP 5.1 Computer Associates CleverPath ECM 3.5 Computer Associates CleverPath Aion 10.0 Computer Associates BrightStor SAN Manager 11.5 Computer Associates BrightStor SAN Manager 11.1 Computer Associates BrightStor Portal 11.1 Computer Associates Advantage Data Transport 3.0 |
| Not Vulnerable: | |
Discussion
Computer Associates Multiple Products Message Queuing Remote Stack Buffer Overflow Vulnerability
Multiple Computer Associates products are prone to a remote stack-based buffer-overflow vulnerability. This issue affects the Message Queuing (CAM/CAFT) component. The application fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.
A successful exploit will allow an attacker to execute arbitrary code with SYSTEM-level privileges.
This issue affects all versions of the CA Message Queuing software prior to v1.11 Build 54_4 on Windows and NetWare.
Multiple Computer Associates products are prone to a remote stack-based buffer-overflow vulnerability. This issue affects the Message Queuing (CAM/CAFT) component. The application fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.
A successful exploit will allow an attacker to execute arbitrary code with SYSTEM-level privileges.
This issue affects all versions of the CA Message Queuing software prior to v1.11 Build 54_4 on Windows and NetWare.
Exploit / POC
Computer Associates Multiple Products Message Queuing Remote Stack Buffer Overflow Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution / Fix
Computer Associates Multiple Products Message Queuing Remote Stack Buffer Overflow Vulnerability
Solution:
The vendor has released fixes to address this issue. Please see the references for more information.
Solution:
The vendor has released fixes to address this issue. Please see the references for more information.
References
Computer Associates Multiple Products Message Queuing Remote Stack Buffer Overflow Vulnerability
References:
References:
- CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability (Computer Associates)
- CA Message Queuing Server (Cam.exe) Overflow (IBM Internet Security Systems)
- Computer Associates Homepage (Computer Associates)
- [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability (Computer Associates)