CVE-2007-5082
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 63.5%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 63.46% probability · 99th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- broadcom/brightstor hierarchical storage manager
- Source
- cve@mitre.org
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-16
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601
- http://secunia.com/advisories/26914Patch, Vendor Advisory
- http://securitytracker.com/id?1018747
- http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.aspPatch
- http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690Patch
- http://www.securityfocus.com/archive/1/480808/100/0/threaded
- http://www.securityfocus.com/bid/25823
- http://www.vupen.com/english/advisories/2007/3275Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36825
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-16
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601
- http://secunia.com/advisories/26914Patch, Vendor Advisory
- http://securitytracker.com/id?1018747
- http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.aspPatch
- http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690Patch
- http://www.securityfocus.com/archive/1/480808/100/0/threaded
- http://www.securityfocus.com/bid/25823
- http://www.vupen.com/english/advisories/2007/3275Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36825
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.