CVE-2007-0060

Stack-based buffer overflow in the Message Queuing Server (Cam.exe) in CA (formerly Computer Associates) Message Queuing (CAM / CAFT) software before 1.11 Build 54_4 on Windows and NetWare, as used in CA Advantage Data Transport, eTrust Admin, certain BrightStor products, certain CleverPath products, and certain Unicenter products, allows remote attackers to execute arbitrary code via a crafted message to TCP port 3104.

Published: 2007-07-26 Last update: 2026-04-23 Assigner: [email protected] Source: [email protected]
NVD Status：Modified，CVE State: published
View at NVD, CVE.org, EUVD

CVE-2007-0060 is rated High Risk (71.3/100): CVSS Critical severity, with high exploitation likelihood (EPSS 21.82%, 96th percentile). EPSS ranks this CVE among the most likely to be exploited in the near term. High exploitation likelihood—assess exposure and prioritize remediation.

Risk is dynamic; we continuously reassess and refresh what is shown on this page as upstream context changes.

Exploit prediction scoring system (EPSS) score for CVE-2007-0060

EPSS lead: Daily EPSS estimates relative likelihood of exploitation; percentile ranks this CVE among scored vulnerabilities (higher = more severe relative rank).

# Date Old EPSS score New EPSS score Delta (New - Old)
1 2026-03-14 21.17% 21.82% +0.64%
2 2025-06-15 26.33% 21.17% -5.16%
3 2025-03-30 — 26.33% —

Full EPSS history (9 records total)

Common vulnerability scoring system (CVSS) metrics for CVE-2007-0060

CVSS metrics for this CVE.

Base score Version Severity Vector Exploitability Impact Score source
9.3 2.0 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C Click to expand
Access vector (AV:N)
Can be exploited remotely over network reachability.
Access complexity (AC:M)
Exploitation needs some favorable conditions, but not exceptional ones.
Authentication (AU:N)
No authentication is required.
Confidentiality impact (C:C)
Complete confidentiality impact.
Integrity impact (I:C)
Complete integrity impact.
Availability impact (A:C)
Complete availability impact.
 8.6 10.0 [email protected]

Weakness enumeration for CVE-2007-0060

Affected software / configurations for CVE-2007-0060

Vendor Product Version Raw CPE
broadcom advantage_data_transport 3.0 cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:*
broadcom brightstor_portal 11.1 cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:*
broadcom brightstor_san_manager 11.1 cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:*
broadcom brightstor_san_manager 11.5 cpe:2.3:a:broadcom:brightstor_san_manager:11.5:*:*:*:*:*:*:*
broadcom cleverpath_aion 10.0 cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:*
broadcom cleverpath_ecm 3.5 cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:*
broadcom cleverpath_olap 5.1 cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:*
broadcom cleverpath_predictive_analysis_server 2.0 cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:*
broadcom cleverpath_predictive_analysis_server 3.0 cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:*
broadcom etrust_admin 8.0 cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:*
broadcom etrust_admin 8.1 cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:*
broadcom unicenter_application_performance_monitor 3.0 cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:*
broadcom unicenter_application_performance_monitor 3.5 cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:*
broadcom unicenter_asset_management 3.1 cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:*
broadcom unicenter_asset_management 3.2 cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:*
broadcom unicenter_asset_management 3.2 cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:*
broadcom unicenter_asset_management 3.2 cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:*
broadcom unicenter_asset_management 4.0 cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:*
broadcom unicenter_data_transport_option 2.0 cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:*
broadcom unicenter_jasmine 3.0 cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:*
broadcom unicenter_network_and_systems_management 3.0 cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:*
broadcom unicenter_network_and_systems_management 3.1 cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:*
broadcom unicenter_nsm_wireless_network_management_option 3.0 cpe:2.3:a:broadcom:unicenter_nsm_wireless_network_management_option:3.0:*:*:*:*:*:*:*
broadcom unicenter_remote_control 6.0 cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:*
broadcom unicenter_remote_control 6.0 cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:*
broadcom unicenter_service_level_management 3.0 cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:*
broadcom unicenter_service_level_management 3.0.1 cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:*
broadcom unicenter_service_level_management 3.0.2 cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:*
broadcom unicenter_service_level_management 3.5 cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:*
broadcom unicenter_software_delivery 3.0 cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:*
broadcom unicenter_software_delivery 3.1 cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:*
broadcom unicenter_software_delivery 3.1 cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:*
broadcom unicenter_software_delivery 3.1 cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:*
broadcom unicenter_software_delivery 4.0 cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:*
broadcom unicenter_tng 2.1 cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:*
broadcom unicenter_tng 2.2 cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:*
broadcom unicenter_tng 2.4 cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:*
broadcom unicenter_tng 2.4.2 cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:*
ca etrust_admin 2.1 cpe:2.3:a:ca:etrust_admin:2.1:*:*:*:*:*:*:*
ca etrust_admin 2.4 cpe:2.3:a:ca:etrust_admin:2.4:*:*:*:*:*:*:*
ca etrust_admin 2.7 cpe:2.3:a:ca:etrust_admin:2.7:*:*:*:*:*:*:*
ca etrust_admin 2.9 cpe:2.3:a:ca:etrust_admin:2.9:*:*:*:*:*:*:*
ca unicenter_asset_management 4.0 cpe:2.3:a:ca:unicenter_asset_management:4.0:sp1:*:*:*:*:*:*
ca unicenter_enterprise_job_manager 1.0 cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp1:*:*:*:*:*:*
ca unicenter_enterprise_job_manager 1.0 cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp2:*:*:*:*:*:*
ca unicenter_management 4.0 cpe:2.3:a:ca:unicenter_management:4.0:*:lotus_notes_domino:*:*:*:*:*
ca unicenter_management 4.0 cpe:2.3:a:ca:unicenter_management:4.0:*:microsoft_exchange:*:*:*:*:*
ca unicenter_management 4.1 cpe:2.3:a:ca:unicenter_management:4.1:*:microsoft_exchange:*:*:*:*:*
ca unicenter_management 5.0 cpe:2.3:a:ca:unicenter_management:5.0:*:web_servers:*:*:*:*:*
ca unicenter_management 5.0.1 cpe:2.3:a:ca:unicenter_management:5.0.1:*:web_servers:*:*:*:*:*
ca unicenter_software_delivery 4.0 cpe:2.3:a:ca:unicenter_software_delivery:4.0:sp1:*:*:*:*:*:*
ca unicenter_tng 2.2 cpe:2.3:a:ca:unicenter_tng:2.2:*:*:ja:*:*:*:*

References for CVE-2007-0060

cvelogic Threat Intelligence