Vulnerabilities > CVE-2005-2668

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

broadcom

nessus

exploit available

metasploit

NVD

Published: 2005-08-23

Updated: 2024-11-21

Summary

Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.

Vulnerable Configurations

Part	Description	Count
Application	Ca CA Unicenter Management 4.1 CA Unicenter Management 3.5 CA Unicenter Management 5.0.1 CA Unicenter Management 4.0 CA Unicenter Management 5.0 CA Unicenter Asset Management 4.0 CA Etrust Admin 2.1 CA Etrust Admin 2.9 CA Etrust Admin 2.4 CA Etrust Admin 2.7 CA Unicenter Software Delivery 4.0 CA Unicenter Enterprise JOB Manager 1.0 CA Unicenter TNG 2.2	15
Application	Broadcom Broadcom Advantage Data Transport 3.0 Broadcom Adviseit 2.4 Broadcom Brightstor Portal 11.1 Broadcom Brightstor SAN Manager 1.1 Broadcom Brightstor SAN Manager 11.1 Broadcom Cleverpath Aion 10.0 Broadcom Cleverpath ECM 3.5 Broadcom Cleverpath Olap 5.1 Broadcom Cleverpath Predictive Analysis Server 2.0 Broadcom Cleverpath Predictive Analysis Server 3.0 Broadcom Etrust Admin 8.0 Broadcom Etrust Admin 8.1 Broadcom Messaging 1.5 Broadcom Messaging 1.7 Broadcom Messaging 1.11 Broadcom Unicenter Application Performance Monitor 3.0 Broadcom Unicenter Application Performance Monitor 3.5 Broadcom Unicenter Asset Management 3.1 Broadcom Unicenter Asset Management 3.2 Broadcom Unicenter Asset Management 4.0 Broadcom Unicenter Data Transport Option 2.0 Broadcom Unicenter Remote Control 6.0 Broadcom Unicenter Service Level Management 3.0 Broadcom Unicenter Service Level Management 3.0.1 Broadcom Unicenter Service Level Management 3.0.2 Broadcom Unicenter Service Level Management 3.5 Broadcom Unicenter Jasmine 3.0 Broadcom Unicenter Management Portal 2.0 Broadcom Unicenter Management Portal 3.1 Broadcom Unicenter Network AND Systems Management 3.0 Broadcom Unicenter Network AND Systems Management 3.1 Broadcom Unicenter NSM Wireless Network Management Option 3.0 Broadcom Unicenter Performance Management 2.4 Broadcom Unicenter Software Delivery 3.0 Broadcom Unicenter Software Delivery 3.1 Broadcom Unicenter Software Delivery 4.0 Broadcom Unicenter TNG 2.1 Broadcom Unicenter TNG 2.2 Broadcom Unicenter TNG 2.4 Broadcom Unicenter TNG 2.4.2	47

Exploit-Db

description	CA CAM log_security() Stack Buffer Overflow (Win32). CVE-2005-2668. Remote exploit for windows platform
id	EDB-ID:16825
last seen	2016-02-02
modified	2010-09-20
published	2010-09-20
reporter	metasploit
source	https://www.exploit-db.com/download/16825/
title	CA CAM log_security Stack Buffer Overflow Win32

Metasploit

description	This module exploits a vulnerability in the CA CAM service by passing a long parameter to the log_security() function. The CAM service is part of TNG Unicenter. This module has been tested on Unicenter v3.1.
id	MSF:EXPLOIT/WINDOWS/UNICENTER/CAM_LOG_SECURITY
last seen	2020-03-11
modified	2017-07-24
published	2005-11-27
references	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-2668
reporter	Rapid7
source	https://github.com/rapid7/metasploit-framework/blob/master//modules/exploits/windows/unicenter/cam_log_security.rb
title	CA CAM log_security() Stack Buffer Overflow (Win32)

Nessus

NASL family	Gain a shell remotely
NASL id	CACAM_OVERFLOW.NASL
description	The remote version of CA Message Queuing Service contains a stack overflow in the
last seen	2020-06-01
modified	2020-06-02
plugin id	20173
published	2005-11-08
reporter	This script is Copyright (C) 2005-2018 Tenable Network Security, Inc.
source	https://www.tenable.com/plugins/nessus/20173
title	CA Multiple Products Message Queuing Multiple Remote Vulnerabilities

Packetstorm

data source	https://packetstormsecurity.com/files/download/83148/cam_log_security.rb.txt
id	PACKETSTORM:83148
last seen	2016-12-05
published	2009-11-26
reporter	H D Moore
source	https://packetstormsecurity.com/files/83148/CA-CAM-log_security-Stack-Overflow-Win32.html
title	CA CAM log_security() Stack Overflow (Win32)

Saint

bid	14622
description	Computer Associates Message Queuing
id	misc_cam
osvdb	18916
title	ca_message_queue
type	remote

Vulnerabilities > CVE-2005-2668 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2005-2668"}]}

Summary

Vulnerable Configurations

Exploit-Db

Metasploit

Nessus

Packetstorm

Saint

References

Vulnerabilities > CVE-2005-2668