CVE-2007-5082 Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent se...
HighCVSS 10.0
EPSS 63.5%
Framework module
Public exploit
PoC
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| broadcom brightstor hierarchical storage manager | = 11.5 | No fix listed |
References
- dvlabs.tippingpoint.com
- 20070927 Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities third-party-advisory
- 26914 patch third-party-advisory vendor-advisory
- 1018747 vdb-entry
- supportconnectw.ca.com patch
- www.ca.com patch
- 20070927 [CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities mailing-list
- 25823 vdb-entry
- ADV-2007-3275 vdb-entry vendor-advisory
- ca-brightstor-csagent-bo(36825) vdb-entry