CVE-2005-2669

Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary…

published August 23, 2005

CVSS
—
EPSS
7%
Percentile
94.4
In the wild
Unconfirmed
What it is

⚠️ Spoofed packets can perform a magic trick! A remote attacker can execute arbitrary commands on your CA Message Queuing server with just a crafty packet.🪄 Think of it like a delivery service that accepts any package without checking the sender — the doors swing wide open to anything, including malicious surprises! 📦 If exploited, an attacker could potentially take control of your server and execute commands, which could lead to data breaches, service disruptions, or worse. This can be especially concerning when sensitive information is at risk!

Put simply

Think of it like a delivery service that accepts any package without checking the sender — the doors swing wide open to anything, including malicious surprises! 📦 This vulnerability in Computer Associates (CA) Message Queuing allows malicious users to send spoofed CAFT packets, enabling them to execute arbitrary commands remotely.

What to do

If exploited, an attacker could potentially take control of your server and execute commands, which could lead to data breaches, service disruptions, or worse. This can be especially concerning when sensitive information is at risk! To protect against this vulnerability, ensure you're running at least Build 220_13 for versions 1.05 and 1.07, or at least Build 29_13 for version 1.11. Regularly update and patch your systems to keep them secure! You've got this! Stay proactive, and your systems will be safe and sound! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07307 · 94.4th percentile
Published
2005-08-23T04:00Z
EPSS history
Timeline
  • 23 AUG 04:00Z
    Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary…
    cvelistv5