CA Message Queuing (CAM/CAFT) invalid request and ...

Date Discovered: 2006. február 2.
Date Published: 2006. február 2.
Last Updated: 2006. február 2.

Threat Assessment
Overall Risk: Medium
Impact:          High
Popularity:    Medium
Simplicity:    Low

Vulnerability Description
Vulnerability ID:          33581
Discovered By:            npouvesle[at]tenablesecurity[dot]com
Exploitable Locally:     No
Exploitable Remotely: Yes
Impact:                        Remote attackers can cause a denial of service condition.
Root Cause:                 Software Vulnerability

CA Message Queuing (CAM/CAFT) software contains multiple vulnerabilities that can allow remote attackers to cause a denial of service condition. The first vulnerability is due to improper processing of malicious messages sent to TCP port 4105. The second vulnerability allows attackers to spoof CAM control messages. Remote attackers can exploit these vulnerabilities to cause a denial of service condition.

More information on CA Vulnerability Information Center:
http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=33581

Computer Associates – the Trusted Source of Security Knowledge