VulnerabilityModified
CVE-2005-2669
Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.
HIGH 10.0EPSS 7.31%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (7.31%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 7.31% probability · 94th percentile
- CISA KEV
- Not listed
- Affected
- broadcom/advantage data transport · broadcom/adviseit · broadcom/brightstor portal · broadcom/brightstor san manager · broadcom/cleverpath aion · broadcom/cleverpath ecm · broadcom/cleverpath olap · broadcom/cleverpath predictive analysis server · broadcom/etrust admin · broadcom/messaging · broadcom/unicenter application performance monitor · broadcom/unicenter asset management · broadcom/unicenter data transport option · broadcom/unicenter jasmine · broadcom/unicenter management portal · broadcom/unicenter network and systems management · broadcom/unicenter nsm wireless network management option · broadcom/unicenter performance management · broadcom/unicenter remote control · broadcom/unicenter service level management · +8 more
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/16513Third Party Advisory
- http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.aspBroken Link, Vendor Advisory
- http://www.osvdb.org/18917Broken Link
- http://www.securityfocus.com/bid/14623Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2005/1482Permissions Required
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919Vendor Advisory
- http://secunia.com/advisories/16513Third Party Advisory
- http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.aspBroken Link, Vendor Advisory
- http://www.osvdb.org/18917Broken Link
- http://www.securityfocus.com/bid/14623Third Party Advisory, VDB Entry
- http://www.vupen.com/english/advisories/2005/1482Permissions Required
- http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.