CVE-2007-4880

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

75.94% chance of exploitation in the next 30 days, 99th percentile

Published

2007-09-28

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/ibm_tsm_cad_header.…

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16764
• https://www.exploit-db.com/exploits/4573

References

• CVE Record
• NVD entry

Related

• CVE-2007-4874
• CVE-2007-4886
• CVE-2007-4863
• CVE-2007-4890
• CVE-2007-4862
• CVE-2007-4891