CVE-2007-5082

Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2007-10-01

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• Brightstor Hierarchical Storage Manager (Broadcom)

References

• http://dvlabs.tippingpoint.com/advisory/TPTI-07-16
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601
• http://secunia.com/advisories/26914
• http://securitytracker.com/id?1018747
• http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp
• http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690
• http://www.securityfocus.com/archive/1/480808/100/0/threaded
• http://www.securityfocus.com/bid/25823
• http://www.vupen.com/english/advisories/2007/3275
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36825