← Vulnerability feed

Vulnerability record · CVE-2007-0060 · published 26 July 2007

CVE-2007-0060: Broadcom advantage data transport vulnerability

Broadcom · Advantage Data Transport

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

9.3 CVSS 2.0 High EPSS 24% · top 2.3%
9.3CVSS 2.0 base score
24%EPSS exploitation probability, 30 days
NoNot in CISA KEV
24Affected product versions listed by NVD
18References
16 Jun 2026Last modified by NVD

Description

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

AV:N/AC:M/Au:N/C:C/I:C/A:C

Affected products

24 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://secunia.com/advisories/26190 Third Party Advisory
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 Vendor Advisory
http://www.iss.net/threats/272.html Broken Link
http://www.securityfocus.com/archive/1/474602/100/0/threaded
http://www.securityfocus.com/bid/25051 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1018449 Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2007/2638 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 Third Party AdvisoryVDB Entry
http://secunia.com/advisories/26190 Third Party Advisory
http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp Vendor Advisory
http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809 Vendor Advisory
http://www.iss.net/threats/272.html Broken Link
http://www.securityfocus.com/archive/1/474602/100/0/threaded
http://www.securityfocus.com/bid/25051 Third Party AdvisoryVDB Entry
http://www.securitytracker.com/id?1018449 Third Party AdvisoryVDB Entry
http://www.vupen.com/english/advisories/2007/2638 Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/32234 Third Party AdvisoryVDB Entry

Track CVE-2007-0060 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2005-3653Broadcom brightstor arcserve backup memory buffer overflow vulnerabilityHeap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.0512…EPSS 19%10.0CVE-2005-2668CA Message Queuing buffer overflows allow remote code executionComputer Associates Message Queuing (CAM/CAFT) versions 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 contain multiple buffer overflows…EPSS 75%analysed10.0CVE-2005-2669Broadcom advantage data transport vulnerabilityComputer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute …EPSS 7.3%5.0CVE-2005-2667Broadcom advantage data transport vulnerabilityUnknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows att…EPSS 3.1%

Source: NIST National Vulnerability Database (record CVE-2007-0060), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.