Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and…
Priority MEDIUM 53Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- Complete · Complete · Complete
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.
Why it matters now
EPSS 0.07307 94th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 62
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:adviseit:2.4:*:*:*:*:*:*:* | 2.4 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:* | 11.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:brightstor_san_manager:1.1:*:*:*:*:*:*:* | 1.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp1:*:*:*:*:*:* | 1.1 sp1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp2:*:*:*:*:*:* | 1.1 sp2 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:* | 11.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:* | 10.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:* | 3.5 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:* | 5.1 | Vulnerable | Broadcom |
- cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:adviseit:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:* Versions 11.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:brightstor_san_manager:1.1:*:*:*:*:*:*:* Versions 1.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp1:*:*:*:*:*:* Versions 1.1 sp1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp2:*:*:*:*:*:* Versions 1.1 sp2 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:* Versions 11.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:* Versions 10.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:* Versions 5.1 Vulnerable ·Broadcom
Show 52 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:* | 8.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:* | 8.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:messaging:1.5:*:*:*:*:*:*:* | 1.5 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:messaging:1.7:*:*:*:*:*:*:* | 1.7 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:messaging:1.11:*:*:*:*:*:*:* | 1.11 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:* | 3.5 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:* | 3.2 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:* | 3.2 sp1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:* | 3.2 sp2 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_management_portal:2.0:*:*:*:*:*:*:* | 2.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_management_portal:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_nsm_wireless_network_management_option:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_performance_management:2.4:sp3:openvms:*:*:*:*:* | 2.4 sp3 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:* | 6.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:* | 6.0 sp1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:* | 3.0.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:* | 3.0.2 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:* | 3.5 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:* | 3.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:* | 3.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:* | 3.1 sp1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:* | 3.1 sp2 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:* | 4.0 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:* | 2.2 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:* | 2.4 | Vulnerable | Broadcom |
| cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:* | 2.4.2 | Vulnerable | Broadcom |
| cpe:2.3:a:ca:etrust_admin:2.1:*:*:*:*:*:*:* | 2.1 | Vulnerable | Ca |
| cpe:2.3:a:ca:etrust_admin:2.4:*:*:*:*:*:*:* | 2.4 | Vulnerable | Ca |
| cpe:2.3:a:ca:etrust_admin:2.7:*:*:*:*:*:*:* | 2.7 | Vulnerable | Ca |
| cpe:2.3:a:ca:etrust_admin:2.9:*:*:*:*:*:*:* | 2.9 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_asset_management:4.0:sp1:*:*:*:*:*:* | 4.0 sp1 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp1:*:*:*:*:*:* | 1.0 sp1 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp2:*:*:*:*:*:* | 1.0 sp2 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_management:3.5:*:websphere_mq:*:*:*:*:* | 3.5 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_management:4.0:*:lotus_notes_domino:*:*:*:*:* | 4.0 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_management:4.0:*:microsoft_exchange:*:*:*:*:* | 4.0 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_management:4.1:*:microsoft_exchange:*:*:*:*:* | 4.1 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_management:5.0:*:web_servers:*:*:*:*:* | 5.0 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_management:5.0.1:*:web_servers:*:*:*:*:* | 5.0.1 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_software_delivery:4.0:sp1:*:*:*:*:*:* | 4.0 sp1 | Vulnerable | Ca |
| cpe:2.3:a:ca:unicenter_tng:2.2:*:*:ja:*:*:*:* | 2.2 | Vulnerable | Ca |
- cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:* Versions 8.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:* Versions 8.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:messaging:1.5:*:*:*:*:*:*:* Versions 1.5 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:messaging:1.7:*:*:*:*:*:*:* Versions 1.7 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:messaging:1.11:*:*:*:*:*:*:* Versions 1.11 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:* Versions 3.2 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:* Versions 3.2 sp1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:* Versions 3.2 sp2 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_management_portal:2.0:*:*:*:*:*:*:* Versions 2.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_management_portal:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_nsm_wireless_network_management_option:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_performance_management:2.4:sp3:openvms:*:*:*:*:* Versions 2.4 sp3 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:* Versions 6.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:* Versions 6.0 sp1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:* Versions 3.0.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:* Versions 3.0.2 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:* Versions 3.5 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:* Versions 3.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:* Versions 3.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:* Versions 3.1 sp1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:* Versions 3.1 sp2 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:* Versions 2.2 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Broadcom
- cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:* Versions 2.4.2 Vulnerable ·Broadcom
- cpe:2.3:a:ca:etrust_admin:2.1:*:*:*:*:*:*:* Versions 2.1 Vulnerable ·Ca
- cpe:2.3:a:ca:etrust_admin:2.4:*:*:*:*:*:*:* Versions 2.4 Vulnerable ·Ca
- cpe:2.3:a:ca:etrust_admin:2.7:*:*:*:*:*:*:* Versions 2.7 Vulnerable ·Ca
- cpe:2.3:a:ca:etrust_admin:2.9:*:*:*:*:*:*:* Versions 2.9 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_asset_management:4.0:sp1:*:*:*:*:*:* Versions 4.0 sp1 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp1:*:*:*:*:*:* Versions 1.0 sp1 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp2:*:*:*:*:*:* Versions 1.0 sp2 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_management:3.5:*:websphere_mq:*:*:*:*:* Versions 3.5 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_management:4.0:*:lotus_notes_domino:*:*:*:*:* Versions 4.0 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_management:4.0:*:microsoft_exchange:*:*:*:*:* Versions 4.0 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_management:4.1:*:microsoft_exchange:*:*:*:*:* Versions 4.1 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_management:5.0:*:web_servers:*:*:*:*:* Versions 5.0 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_management:5.0.1:*:web_servers:*:*:*:*:* Versions 5.0.1 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_software_delivery:4.0:sp1:*:*:*:*:*:* Versions 4.0 sp1 Vulnerable ·Ca
- cpe:2.3:a:ca:unicenter_tng:2.2:*:*:ja:*:*:*:* Versions 2.2 Vulnerable ·Ca
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2005-2669
- 2026-10-03 Alias added: GHSA-6v78-jvqf-frmf
References
Sources
- CVE-2005-2669 · CVE Program
- CVE-2005-2669 · NVD
- FIRST EPSS
- GHSA-6v78-jvqf-frmf · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences