{"id":"CVE-2007-0060","aliases":["EUVD-2007-0064","GHSA-4c4h-q562-34mm"],"status":"published","title":"Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer...","description":"Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.","severity":{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.23639,"percentile":0.97826,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2007-07-26T00:00:00Z","modified":"2026-06-16T22:34:48Z","products":[{"vendor":"broadcom","product":"advantage_data_transport"},{"vendor":"broadcom","product":"brightstor_portal"},{"vendor":"broadcom","product":"brightstor_san_manager"},{"vendor":"broadcom","product":"cleverpath_aion"},{"vendor":"broadcom","product":"cleverpath_ecm"},{"vendor":"broadcom","product":"cleverpath_olap"},{"vendor":"broadcom","product":"cleverpath_predictive_analysis_server"},{"vendor":"broadcom","product":"etrust_admin"},{"vendor":"broadcom","product":"unicenter_application_performance_monitor"},{"vendor":"broadcom","product":"unicenter_asset_management"},{"vendor":"broadcom","product":"unicenter_data_transport_option"},{"vendor":"broadcom","product":"unicenter_jasmine"},{"vendor":"broadcom","product":"unicenter_network_and_systems_management"},{"vendor":"broadcom","product":"unicenter_nsm_wireless_network_management_option"},{"vendor":"broadcom","product":"unicenter_remote_control"},{"vendor":"broadcom","product":"unicenter_service_level_management"},{"vendor":"broadcom","product":"unicenter_software_delivery"},{"vendor":"broadcom","product":"unicenter_tng"},{"vendor":"ca","product":"etrust_admin"},{"vendor":"ca","product":"unicenter_asset_management"},{"vendor":"ca","product":"unicenter_enterprise_job_manager"},{"vendor":"ca","product":"unicenter_management"},{"vendor":"ca","product":"unicenter_software_delivery"},{"vendor":"ca","product":"unicenter_tng"}],"references":[{"url":"http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2007/2638","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Third Party Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/32234","tags":["vdb-entry","x_refsource_XF","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id?1018449","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://secunia.com/advisories/26190","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Third Party Advisory"]},{"url":"http://www.securityfocus.com/archive/1/474602/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/25051","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.iss.net/threats/272.html","tags":["third-party-advisory","x_refsource_ISS","x_transferred","Broken Link"]},{"url":"http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-0060"},{"url":"https://github.com/advisories/GHSA-4c4h-q562-34mm"}],"sources":{"cve":[{"id":"CVE-2007-0060","description":"Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.","status":"published","published":"2007-07-26T00:00:00Z","modified":"2024-08-07T12:03:36.982Z","updated_at":"2026-11-02T13:34:15.046008Z"}],"euvd":[{"id":"EUVD-2007-0064","description":"Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.","status":"published","published":"2007-07-26T00:00:00Z","modified":"2024-08-07T12:03:36Z","updated_at":"2026-11-03T01:38:32.679637Z"}],"ghsa":[{"id":"GHSA-4c4h-q562-34mm","title":"Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer...","description":"Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.","status":"published","published":"2022-05-01T17:41:30Z","modified":"2023-01-31T05:03:18Z","updated_at":"2026-11-02T14:48:26.443063Z"}],"nvd":[{"id":"CVE-2007-0060","description":"Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.","status":"published","published":"2007-07-26T00:30:00Z","modified":"2026-06-16T22:34:48.283Z","cvss":[{"version":"2.0","score":9.3,"vector":"AV:N/AC:M/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:01:17.964611Z"}]}}