Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919
http://www.vupen.com/english/advisories/2005/1482