CVE-2005-2668

highpriority · attend · 76EPSS 0.752 · 100 %ileexploit · weaponizedEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

2 exploits · weaponized

Likely / severe?

75.2% (100th) EPSS

CVSS 10 · high

Is it mine?

54 products

Check your exposure

Who says so?

2 sources

enisa_euvd · nvd

EPSS · scored 2026-10-28

Multiple buffer overflows in Computer Associates (CA) Message Queuing (CAM / CAFT) 1.05, 1.07 before Build 220_13, and 1.11 before Build 29_13 allow remote attackers to execute arbitrary code via unknown vectors.

cvss

Technical severity, 0–10. One row per scoring source.

10.0

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USexploitability 10 · impact 10

v2.010highAV:N/AC:L/Au:N/C:C/I:C/A:C/E:Hsecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-119USLLM-inferred

exploits (2)

Public proof-of-concept and weaponised exploit code.

exploit/windows/unicenter/cam_log_securityCA CAM log_security() Stack Buffer Overflow (Win32)weaponized · metasploit
EDB-16825CA CAM (Windows x86) - 'log_security()' Remote Stack Buffer Overflow (Metasploit)functional · exploit_db

affected products (54)

Products and version ranges known to be affected.

n/a n/a≤ n/aenisa_euvdEU
broadcom advantage data transport= 3.0nvdUScpe:2.3:a:broadcom:advantage_data_transport:*:*:*:*:*:*:*:*
broadcom adviseit= 2.4nvdUScpe:2.3:a:broadcom:adviseit:*:*:*:*:*:*:*:*
broadcom brightstor portal= 11.1nvdUScpe:2.3:a:broadcom:brightstor_portal:*:*:*:*:*:*:*:*
broadcom brightstor san manager= 1.1nvdUScpe:2.3:a:broadcom:brightstor_san_manager:*:*:*:*:*:*:*:*
broadcom brightstor san manager= 11.1nvdUScpe:2.3:a:broadcom:brightstor_san_manager:*:*:*:*:*:*:*:*
broadcom cleverpath aion= 10.0nvdUScpe:2.3:a:broadcom:cleverpath_aion:*:*:*:*:*:*:*:*
broadcom cleverpath ecm= 3.5nvdUScpe:2.3:a:broadcom:cleverpath_ecm:*:*:*:*:*:*:*:*
broadcom cleverpath olap= 5.1nvdUScpe:2.3:a:broadcom:cleverpath_olap:*:*:*:*:*:*:*:*
broadcom cleverpath predictive analysis server= 2.0nvdUScpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:*:*:*:*:*:*:*:*
broadcom cleverpath predictive analysis server= 3.0nvdUScpe:2.3:a:broadcom:cleverpath_predictive_analysis_server:*:*:*:*:*:*:*:*
broadcom etrust admin= 8.0nvdUScpe:2.3:a:broadcom:etrust_admin:*:*:*:*:*:*:*:*
broadcom etrust admin= 8.1nvdUScpe:2.3:a:broadcom:etrust_admin:*:*:*:*:*:*:*:*
broadcom messaging= 1.11nvdUScpe:2.3:a:broadcom:messaging:*:*:*:*:*:*:*:*
broadcom messaging= 1.5nvdUScpe:2.3:a:broadcom:messaging:*:*:*:*:*:*:*:*
broadcom messaging= 1.7nvdUScpe:2.3:a:broadcom:messaging:*:*:*:*:*:*:*:*
broadcom unicenter application performance monitor= 3.0nvdUScpe:2.3:a:broadcom:unicenter_application_performance_monitor:*:*:*:*:*:*:*:*
broadcom unicenter application performance monitor= 3.5nvdUScpe:2.3:a:broadcom:unicenter_application_performance_monitor:*:*:*:*:*:*:*:*
broadcom unicenter asset management= 3.1nvdUScpe:2.3:a:broadcom:unicenter_asset_management:*:*:*:*:*:*:*:*
broadcom unicenter asset management= 3.2nvdUScpe:2.3:a:broadcom:unicenter_asset_management:*:*:*:*:*:*:*:*

showing 20 of 54

also known as (2)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

enisa_euvd nvd NVD CVE.org MITRE

published 2005-08-23modified 2026-06-16

references (14)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan