Description
Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.
References
- http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
- ADV-2007-2638 vdb-entry
- systems-management-bo(32234) vdb-entry
- 1018449 vdb-entry
- 26190 third-party-advisory
- 20070725 [CAID 35527]: CA Message Queuing (CAM / CAFT) Buffer Overflow Vulnerability mailing-list
- 25051 vdb-entry
- 20070724 CA Message Queuing Server (Cam.exe) Overflow third-party-advisory
- http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809