CVEvulnerability
CVE-2007-5082
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.
Affected configurations
• broadcom brightstor hierarchical storage manager 11.5
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-16 dvlabs.tippingpoint.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601 labs.idefense.com
- http://secunia.com/advisories/26914 Patch, Vendor Advisory
- http://securitytracker.com/id?1018747 securitytracker.com
- http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp Patch
- http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690 Patch
- http://www.securityfocus.com/archive/1/480808/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25823 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3275 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36825 exchange.xforce.ibmcloud.com
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-16 dvlabs.tippingpoint.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601 labs.idefense.com
- http://secunia.com/advisories/26914 Patch, Vendor Advisory
- http://securitytracker.com/id?1018747 securitytracker.com
- http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp Patch
- http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690 Patch
- http://www.securityfocus.com/archive/1/480808/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25823 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/3275 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36825 exchange.xforce.ibmcloud.com