CVE-2007-0060

CVE-2007-0060 is a critical-severity vulnerability in Broadcom Advantage Data Transport with a CVSS 2.0 base score of 9.3. Its EPSS exploit-prediction score of 24% places it in the 98th percentile, indicating an elevated likelihood of exploitation.

Key facts

• Severity: Critical (CVSS 2.0 base score 9.3)
• EPSS exploit prediction: 24% (98th percentile)
• Actively exploited: Not listed in CISA KEV
• Affected product: Broadcom Advantage Data Transport
• Published: 2007-07-26
• Last modified: 2026-06-16

Description

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

Frequently asked questions

What is CVE-2007-0060?

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

How severe is CVE-2007-0060?

CVE-2007-0060 has a CVSS 2.0 base score of 9.3, rated critical severity.

Is CVE-2007-0060 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 24% (98th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2007-0060?

CVE-2007-0060 primarily affects Broadcom Advantage Data Transport. In total, 52 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2007-0060?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its critical severity, prioritise patching exposed systems.

When was CVE-2007-0060 published?

CVE-2007-0060 was published on 2007-07-26 and last updated on 2026-06-16.

References

• http://secunia.com/advisories/26190
• http://supportconnectw.ca.com/public/dto_transportit/infodocs/camsgquevul-secnot.asp
• http://www.ca.com/us/securityadvisor/newsinfo/collateral.aspx?cid=149809
• http://www.iss.net/threats/272.html
• http://www.securityfocus.com/archive/1/474602/100/0/threaded
• http://www.securityfocus.com/bid/25051
• http://www.securitytracker.com/id?1018449
• http://www.vupen.com/english/advisories/2007/2638
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32234

Affected products (52)

• cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:brightstor_san_manager:11.5:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_nsm_wireless_network_management_option:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:*
• cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:*
• cpe:2.3:a:ca:etrust_admin:2.1:*:*:*:*:*:*:*
• cpe:2.3:a:ca:etrust_admin:2.4:*:*:*:*:*:*:*

More vulnerabilities in Broadcom Advantage Data Transport

• CVE-2005-2668 — Critical (CVSS 10.0): Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and…
• CVE-2005-2669 — Critical (CVSS 10.0): Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13…
• CVE-2005-2667 — Medium (CVSS 5.0): Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11…

All CVEs affecting Broadcom Advantage Data Transport →