10.0crit
CVE-2005-2668in critical feed2 exploits
Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29…
Published 21 y ago · modified 4 mo ago · JSON
CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
75.2%
percentile 100%
Public exploits
2
Metasploit · Exploit-DB
Summary
Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.
Exploit prediction (EPSS)
75.24% probability of exploitation in the next 30 days, higher than 100% of all scored CVEs.
Exploits and detections
- Metasploit exploit/windows/unicenter/cam_log_security CA CAM log_security() Stack Buffer Overflow (Win32) · metasploit exploit, great rank · 2005-08-22
- EDB-16825 CA CAM (Windows x86) - 'log_security()' Remote Stack Buffer Overflow (Metasploit) · remote · 2010-09-20
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
- securityfocus.com /bid/14622 · vdb-entry, x_refsource_BID, x_transferred
- www3.ca.com /securityadvisor/vulninfo/vuln.aspx?id=32919 · x_refsource_MISC, x_transferred
- osvdb.org /18916 · vdb-entry, x_refsource_OSVDB, x_transferred
- supportconnectw.ca.com /public/ca_common_docs/camsecurity_notice.asp · x_refsource_CONFIRM, x_transferred
- secunia.com /advisories/16513 · third-party-advisory, x_refsource_SECUNIA, x_transferred
- kb.cert.org /vuls/id/619988 · third-party-advisory, x_refsource_CERT-VN, x_transferred
- vupen.com /english/advisories/2005/1482 · vdb-entry, x_refsource_VUPEN, x_transferred
Sources
- CVE List: CVE-2005-2668
- NVD: CVE-2005-2668
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.