HOMEVULNERABILITIESCVE-2007-0060
CRITICAL

CVE-2007-0060

NVD-CWE-OtherPublished: July 26, 2007· Updated: Jun 16, 2026

9.3
CVSS v3.1

Official Description

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

NVD Source

Technical Analysis

CVE-2007-0060 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CVSS v3.1 Vector Breakdown

Exploitability
Attack VectorNetwork
Attack ComplexityM
Privileges Req.
User Interaction
Scope
Impact
ConfidentialityC
IntegrityC
AvailabilityC
AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected Vendors & Products

broadcom18 product(s)
advantage data transportbrightstor portalbrightstor san managercleverpath aioncleverpath ecmcleverpath olapcleverpath predictive analysis serveretrust adminunicenter application performance monitorunicenter asset managementunicenter data transport optionunicenter jasmine+6
ca6 product(s)
etrust adminunicenter asset managementunicenter enterprise job managerunicenter managementunicenter software deliveryunicenter tng
Source: NVD CPE · 45 total CPE entries

Exploit & PoC Resources

NO KNOWN EXPLOITNo public exploit confirmed at this time
Exploit-DB
Offensive Security exploit database
GitHub PoC Search
Community PoC repositories
Rapid7 / Metasploit
Metasploit module search
PacketStorm
Security advisories & exploits
NVD Detail
Official NIST entry
MITRE CVE
CVE Program entry
External links open in a new tab. Always verify in a controlled environment before use.

Official Patches & Advisories

ADVISORYhttp://secunia.com/advisories/26190
ADVISORYhttp://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
ADVISORYhttp://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
ADVISORYhttp://www.securityfocus.com/bid/25051
ADVISORYhttp://www.securitytracker.com/id?1018449
ADVISORYhttp://www.vupen.com/english/advisories/2007/2638
ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/32234
ADVISORYhttp://secunia.com/advisories/26190
ADVISORYhttp://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
ADVISORYhttp://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
ADVISORYhttp://www.securityfocus.com/bid/25051
ADVISORYhttp://www.securitytracker.com/id?1018449
ADVISORYhttp://www.vupen.com/english/advisories/2007/2638
ADVISORYhttps://exchange.xforce.ibmcloud.com/vulnerabilities/32234

All References (18)

→
http://secunia.com/advisories/26190Third Party Advisory
→
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.aspVendor Advisory
→
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809Vendor Advisory
→
http://www.iss.net/threats/272.htmlBroken Link
→
http://www.securityfocus.com/archive/1/474602/100/0/threaded
→
http://www.securityfocus.com/bid/25051Third Party Advisory · VDB Entry
→
http://www.securitytracker.com/id?1018449Third Party Advisory · VDB Entry
→
http://www.vupen.com/english/advisories/2007/2638Third Party Advisory
→
https://exchange.xforce.ibmcloud.com/vulnerabilities/32234Third Party Advisory · VDB Entry
→
http://secunia.com/advisories/26190Third Party Advisory
→
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.aspVendor Advisory
→
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809Vendor Advisory
→
http://www.iss.net/threats/272.htmlBroken Link
→
http://www.securityfocus.com/archive/1/474602/100/0/threaded
→
http://www.securityfocus.com/bid/25051Third Party Advisory · VDB Entry

Quick Facts

CVE IDCVE-2007-0060
CVSS Score9.3 / 10
SeverityCRITICAL
WeaknessNVD-CWE-Other
CISA KEVNo
Affected2 vendor(s)
PublishedJul 26, 2007

Related CVEs (NVD-CWE-Other)

CVE-2005-2420
10.0
CVE-2004-2275
10.0
CVE-2022-4390
10.0
CVE-2004-0676
10.0
CVE-2002-1868
10.0
CVE-2004-0261
10.0

Recommended Actions

  • →Apply vendor patches immediately
  • →Monitor CVE-2007-0060 in threat intel feeds
  • →Review IDS/IPS signatures for exploitation attempts
Data sourced from NVD (NIST), CISA KEV, and EPSS (FIRST). Analysis generated by CTIWATCH.COM. CVE data is provided under the NVD usage policy.
← All Vulnerabilities·Search for CVE-2007-0060·NVD