Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.
総合評価: CVE-2005-2668 は悪用リスクが高い(91.1/100)。CVSS 深刻度は重大。悪用される可能性が高い(EPSS 82.85%、99 パーセンタイル) 根拠: 公開エクスプロイトが 1 件参照されています(Exploit-DB)。 直近 1 日で EPSS が +1.36% 上昇。悪用への関心が高まっている可能性があります。 推奨対応: 公開エクスプロイトが確認されています。影響範囲の確認、緩和策の適用、パッチ適用を優先してください。
リスクは変動します。再評価に基づき、本ページの表示内容を更新しています。
| EDB-ID | ソース | 種別 | 公開 | リンク |
|---|---|---|---|---|
| 16825 | exploit_db | edb | 2010-09-20 | Exploit-DB ↗ |
EPSS は日次で悪用されやすさの相対度合いを推定します。パーセンタイルは採点済み CVE の中での相対位置(高いほど相対的に深刻)を示します。
| # | 日付 | 旧 EPSS スコア | 新 EPSS スコア | Δ(新 − 旧) |
|---|---|---|---|---|
| 1 | 2025-07-26 | 81.49% | 82.85% | +1.36% |
| 2 | 2025-03-30 | 78.47% | 81.49% | +3.02% |
| 3 | 2025-03-29 | — | 78.47% | — |
EPSS の全履歴 (全 12 件)
この CVE の CVSS 指標。
| ベーススコア | バージョン | 深刻度 | ベクトル | 悪用しやすさ | 影響 | スコアの出典 |
|---|---|---|---|---|---|---|
| 10.0 | 2.0 | HIGH |
|
10.0 | 10.0 | [email protected] |
| ベンダー | 製品 | バージョン | 生の CPE |
|---|---|---|---|
| broadcom | advantage_data_transport | 3.0 | cpe:2.3:a:broadcom:advantage_data_transport:3.0:*:*:*:*:*:*:* |
| broadcom | adviseit | 2.4 | cpe:2.3:a:broadcom:adviseit:2.4:*:*:*:*:*:*:* |
| broadcom | brightstor_portal | 11.1 | cpe:2.3:a:broadcom:brightstor_portal:11.1:*:*:*:*:*:*:* |
| broadcom | brightstor_san_manager | 1.1 | cpe:2.3:a:broadcom:brightstor_san_manager:1.1:*:*:*:*:*:*:* |
| broadcom | brightstor_san_manager | 1.1 | cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp1:*:*:*:*:*:* |
| broadcom | brightstor_san_manager | 1.1 | cpe:2.3:a:broadcom:brightstor_san_manager:1.1:sp2:*:*:*:*:*:* |
| broadcom | brightstor_san_manager | 11.1 | cpe:2.3:a:broadcom:brightstor_san_manager:11.1:*:*:*:*:*:*:* |
| broadcom | cleverpath_aion | 10.0 | cpe:2.3:a:broadcom:cleverpath_aion:10.0:*:*:*:*:*:*:* |
| broadcom | cleverpath_ecm | 3.5 | cpe:2.3:a:broadcom:cleverpath_ecm:3.5:*:*:*:*:*:*:* |
| broadcom | cleverpath_olap | 5.1 | cpe:2.3:a:broadcom:cleverpath_olap:5.1:*:*:*:*:*:*:* |
| broadcom | cleverpath_predictive_analysis_server | 2.0 | cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:2.0:*:*:*:*:*:*:* |
| broadcom | cleverpath_predictive_analysis_server | 3.0 | cpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:3.0:*:*:*:*:*:*:* |
| broadcom | etrust_admin | 8.0 | cpe:2.3:a:broadcom:etrust_admin:8.0:*:*:*:*:*:*:* |
| broadcom | etrust_admin | 8.1 | cpe:2.3:a:broadcom:etrust_admin:8.1:*:*:*:*:*:*:* |
| broadcom | messaging | 1.5 | cpe:2.3:a:broadcom:messaging:1.5:*:*:*:*:*:*:* |
| broadcom | messaging | 1.7 | cpe:2.3:a:broadcom:messaging:1.7:*:*:*:*:*:*:* |
| broadcom | messaging | 1.11 | cpe:2.3:a:broadcom:messaging:1.11:*:*:*:*:*:*:* |
| broadcom | unicenter_application_performance_monitor | 3.0 | cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.0:*:*:*:*:*:*:* |
| broadcom | unicenter_application_performance_monitor | 3.5 | cpe:2.3:a:broadcom:unicenter_application_performance_monitor:3.5:*:*:*:*:*:*:* |
| broadcom | unicenter_asset_management | 3.1 | cpe:2.3:a:broadcom:unicenter_asset_management:3.1:*:*:*:*:*:*:* |
| broadcom | unicenter_asset_management | 3.2 | cpe:2.3:a:broadcom:unicenter_asset_management:3.2:*:*:*:*:*:*:* |
| broadcom | unicenter_asset_management | 3.2 | cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp1:*:*:*:*:*:* |
| broadcom | unicenter_asset_management | 3.2 | cpe:2.3:a:broadcom:unicenter_asset_management:3.2:sp2:*:*:*:*:*:* |
| broadcom | unicenter_asset_management | 4.0 | cpe:2.3:a:broadcom:unicenter_asset_management:4.0:*:*:*:*:*:*:* |
| broadcom | unicenter_data_transport_option | 2.0 | cpe:2.3:a:broadcom:unicenter_data_transport_option:2.0:*:*:*:*:*:*:* |
| broadcom | unicenter_jasmine | 3.0 | cpe:2.3:a:broadcom:unicenter_jasmine:3.0:*:*:*:*:*:*:* |
| broadcom | unicenter_management_portal | 2.0 | cpe:2.3:a:broadcom:unicenter_management_portal:2.0:*:*:*:*:*:*:* |
| broadcom | unicenter_management_portal | 3.1 | cpe:2.3:a:broadcom:unicenter_management_portal:3.1:*:*:*:*:*:*:* |
| broadcom | unicenter_network_and_systems_management | 3.0 | cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.0:*:*:*:*:*:*:* |
| broadcom | unicenter_network_and_systems_management | 3.1 | cpe:2.3:a:broadcom:unicenter_network_and_systems_management:3.1:*:*:*:*:*:*:* |
| broadcom | unicenter_nsm_wireless_network_management_option | 3.0 | cpe:2.3:a:broadcom:unicenter_nsm_wireless_network_management_option:3.0:*:*:*:*:*:*:* |
| broadcom | unicenter_performance_management | 2.4 | cpe:2.3:a:broadcom:unicenter_performance_management:2.4:sp3:openvms:*:*:*:*:* |
| broadcom | unicenter_remote_control | 6.0 | cpe:2.3:a:broadcom:unicenter_remote_control:6.0:*:*:*:*:*:*:* |
| broadcom | unicenter_remote_control | 6.0 | cpe:2.3:a:broadcom:unicenter_remote_control:6.0:sp1:*:*:*:*:*:* |
| broadcom | unicenter_service_level_management | 3.0 | cpe:2.3:a:broadcom:unicenter_service_level_management:3.0:*:*:*:*:*:*:* |
| broadcom | unicenter_service_level_management | 3.0.1 | cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.1:*:*:*:*:*:*:* |
| broadcom | unicenter_service_level_management | 3.0.2 | cpe:2.3:a:broadcom:unicenter_service_level_management:3.0.2:*:*:*:*:*:*:* |
| broadcom | unicenter_service_level_management | 3.5 | cpe:2.3:a:broadcom:unicenter_service_level_management:3.5:*:*:*:*:*:*:* |
| broadcom | unicenter_software_delivery | 3.0 | cpe:2.3:a:broadcom:unicenter_software_delivery:3.0:*:*:*:*:*:*:* |
| broadcom | unicenter_software_delivery | 3.1 | cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:*:*:*:*:*:*:* |
| broadcom | unicenter_software_delivery | 3.1 | cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp1:*:*:*:*:*:* |
| broadcom | unicenter_software_delivery | 3.1 | cpe:2.3:a:broadcom:unicenter_software_delivery:3.1:sp2:*:*:*:*:*:* |
| broadcom | unicenter_software_delivery | 4.0 | cpe:2.3:a:broadcom:unicenter_software_delivery:4.0:*:*:*:*:*:*:* |
| broadcom | unicenter_tng | 2.1 | cpe:2.3:a:broadcom:unicenter_tng:2.1:*:*:*:*:*:*:* |
| broadcom | unicenter_tng | 2.2 | cpe:2.3:a:broadcom:unicenter_tng:2.2:*:*:*:*:*:*:* |
| broadcom | unicenter_tng | 2.4 | cpe:2.3:a:broadcom:unicenter_tng:2.4:*:*:*:*:*:*:* |
| broadcom | unicenter_tng | 2.4.2 | cpe:2.3:a:broadcom:unicenter_tng:2.4.2:*:*:*:*:*:*:* |
| ca | etrust_admin | 2.1 | cpe:2.3:a:ca:etrust_admin:2.1:*:*:*:*:*:*:* |
| ca | etrust_admin | 2.4 | cpe:2.3:a:ca:etrust_admin:2.4:*:*:*:*:*:*:* |
| ca | etrust_admin | 2.7 | cpe:2.3:a:ca:etrust_admin:2.7:*:*:*:*:*:*:* |
| ca | etrust_admin | 2.9 | cpe:2.3:a:ca:etrust_admin:2.9:*:*:*:*:*:*:* |
| ca | unicenter_asset_management | 4.0 | cpe:2.3:a:ca:unicenter_asset_management:4.0:sp1:*:*:*:*:*:* |
| ca | unicenter_enterprise_job_manager | 1.0 | cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp1:*:*:*:*:*:* |
| ca | unicenter_enterprise_job_manager | 1.0 | cpe:2.3:a:ca:unicenter_enterprise_job_manager:1.0:sp2:*:*:*:*:*:* |
| ca | unicenter_management | 3.5 | cpe:2.3:a:ca:unicenter_management:3.5:*:websphere_mq:*:*:*:*:* |
| ca | unicenter_management | 4.0 | cpe:2.3:a:ca:unicenter_management:4.0:*:lotus_notes_domino:*:*:*:*:* |
| ca | unicenter_management | 4.0 | cpe:2.3:a:ca:unicenter_management:4.0:*:microsoft_exchange:*:*:*:*:* |
| ca | unicenter_management | 4.1 | cpe:2.3:a:ca:unicenter_management:4.1:*:microsoft_exchange:*:*:*:*:* |
| ca | unicenter_management | 5.0 | cpe:2.3:a:ca:unicenter_management:5.0:*:web_servers:*:*:*:*:* |
| ca | unicenter_management | 5.0.1 | cpe:2.3:a:ca:unicenter_management:5.0.1:*:web_servers:*:*:*:*:* |
| ca | unicenter_software_delivery | 4.0 | cpe:2.3:a:ca:unicenter_software_delivery:4.0:sp1:*:*:*:*:*:* |
| ca | unicenter_tng | 2.2 | cpe:2.3:a:ca:unicenter_tng:2.2:*:*:ja:*:*:*:* |
| URL | タグ |
|---|---|
| http://secunia.com/advisories/16513 | Third Party Advisory |
| http://supportconnectw.ca.com/public/ca_common_docs/camsecurity_notice.asp | Broken Link |
| http://www.kb.cert.org/vuls/id/619988 | Third Party Advisory US Government Resource |
| http://www.osvdb.org/18916 | Broken Link |
| http://www.securityfocus.com/bid/14622 | Patch Third Party Advisory VDB Entry |
| http://www.vupen.com/english/advisories/2005/1482 | Third Party Advisory |
| http://www3.ca.com/securityadvisor/vulninfo/vuln.aspx?id=32919 | Patch Vendor Advisory |