SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2005-2668

Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.

HIGH 10.0EPSS 75.2%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 75.2%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.

Description

Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.

CVSS 2.0
10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
75.24% probability · 99th percentile
CISA KEV
Not listed
Affected
broadcom/advantage data transport · broadcom/adviseit · broadcom/brightstor portal · broadcom/brightstor san manager · broadcom/cleverpath aion · broadcom/cleverpath ecm · broadcom/cleverpath olap · broadcom/cleverpath predictive analysis server · broadcom/etrust admin · broadcom/messaging · broadcom/unicenter application performance monitor · broadcom/unicenter asset management · broadcom/unicenter data transport option · broadcom/unicenter jasmine · broadcom/unicenter management portal · broadcom/unicenter network and systems management · broadcom/unicenter nsm wireless network management option · broadcom/unicenter performance management · broadcom/unicenter remote control · broadcom/unicenter service level management · +8 more
Source
cve@mitre.org

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.