CVE-2007-5082

Description

Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/36825

http://www.vupen.com/english/advisories/2007/3275

http://www.securityfocus.com/bid/25823

http://www.securityfocus.com/archive/1/480808/100/0/threaded

http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690

http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp

http://securitytracker.com/id?1018747

http://secunia.com/advisories/26914

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601

http://dvlabs.tippingpoint.com/advisory/TPTI-07-16

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3