Detections
Analytics
CA Multiple Products Message Queuing Multiple Remote Vulnerabilities
critical Nessus Plugin ID 20173
Language:
Synopsis
Arbitrary code can be executed on the remote host due to a flaw in the CAM service.Description
The remote version of CA Message Queuing Service contains a stack overflow in the 'log_security' function that may allow an attacker to execute arbitrary code on the remote host.This version is also prone to denial of service on the TCP port 4105 as well as arbitrary code execution through spoofed CAFT packets.
An attacker does not need to be authenticated to exploit this flaw.
Solution
CA has released a set of patches for CAM 1.05, 1.07 and 1.11.See Also
Plugin Details
Severity: Critical
ID: 20173
File Name: cacam_overflow.nasl
Version: 1.20
Type: remote
Family: Gain a shell remotely
Published: 11/8/2005
Updated: 12/28/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2005-2668
CVSS v3
Risk Factor: Critical
Base Score: 9.1
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Vulnerability Information
CPE: cpe:/a:ca:messaging
Required KB Items: CA/MessageQueuing
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 8/22/2005
Vulnerability Publication Date: 8/22/2005
Exploitable With
Core Impact
Metasploit (CA CAM log_security() Stack Buffer Overflow (Win32))