Broadcom Etrust Admin vulnerabilities
6 vulnerabilities
Known vulnerabilities in Broadcom Etrust Admin, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2007-1345broadcometrust_admin
EPSS score0.36%
Unspecified vulnerability in cube.exe in the GINA component for CA (Computer Associates) eTrust Admin 8.1.0 through 8.1.2 allows attackers with physical interactive or Remote Desktop access to bypass authentication and gain privileges via the password reset interface.CVE-2007-0060broadcomadvantage_data_transport+23EPSS score23.64%
Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.CVE-2005-2668broadcomadvantage_data_transport+27EPSS score75.24%
Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.CVE-2005-2669broadcomadvantage_data_transport+27EPSS score7.31%
Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows remote attackers to execute arbitrary commands via spoofed CAFT packets.CVE-2005-2667broadcomadvantage_data_transport+23EPSS score3.14%
Unknown vulnerability in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allows attackers to cause a denial of service via unknown vectors, aka the "CAM TCP port vulnerability."CVE-2005-3653broadcombrightstor_arcserve_backup+33EPSS score18.60%
Heap-based buffer overflow in the iGateway service for various Computer Associates (CA) iTechnology products, in iTechnology iGateway before 4.0.051230, allows remote attackers to execute arbitrary code via an HTTP request with a negative Content-Length field.