CVE-2005-2669

Critical

Description

Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.

SeverityCritical
CVSS10.0
Exploit probability—
ProductBroadcom Advantage Data Transport
PublishedAug 23, 2005
First seenAug 23, 2005

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
broadcom advantage_data_transport3.0—
broadcom adviseit2.4—
broadcom brightstor_portal11.1—
broadcom brightstor_san_manager1.1, 11.1—
broadcom cleverpath_aion10.0—
broadcom cleverpath_ecm3.5—
broadcom cleverpath_olap5.1—
broadcom cleverpath_predictive_analysis_server2.0, 3.0—
broadcom etrust_admin8.0, 8.1—
broadcom messaging1.5, 1.7, 1.11—
broadcom unicenter_application_performance_monitor3.0, 3.5—
broadcom unicenter_asset_management3.1, 3.2, 4.0—
broadcom unicenter_data_transport_option2.0—
broadcom unicenter_jasmine3.0—
broadcom unicenter_management_portal2.0, 3.1—
broadcom unicenter_network_and_systems_management3.0, 3.1—
broadcom unicenter_nsm_wireless_network_management_option3.0—
broadcom unicenter_performance_management2.4—
broadcom unicenter_remote_control6.0—
broadcom unicenter_service_level_management3.0, 3.0.1, 3.0.2, 3.5—
broadcom unicenter_software_delivery3.0, 3.1, 4.0—
broadcom unicenter_tng2.1, 2.2, 2.4, 2.4.2—
ca etrust_admin2.1, 2.4, 2.7, 2.9—
ca unicenter_asset_management4.0—
ca unicenter_enterprise_job_manager1.0—
ca unicenter_management3.5, 4.0, 4.1, 5.0, 5.0.1—
ca unicenter_software_delivery4.0—
ca unicenter_tng2.2—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.