CVE-2007-4880

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.

CVSS v2.0 NVD

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

75.94% chance of exploitation in the next 30 days, 100th percentile

Published

2007-09-28

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ibm_tsm_cad_header…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16764
• https://www.exploit-db.com/exploits/4573

Security advisories

• http://secunia.com/advisories/26883
• http://www-1.ibm.com/support/docview.wss?uid=swg21268775
• http://www-1.ibm.com/support/search.wss?rs=0&q=IC52905&apar=only
• http://www.securityfocus.com/bid/25743

References

• CVE Record
• NVD entry