CVE-2007-5082

Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

63.46% chance of exploitation in the next 30 days, 99th percentile

Published

2007-10-01

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/exploits/windows/brightstor/hsmserver.rb

ExploitDB entries (2)

• https://www.exploit-db.com/exploits/16402
• https://www.exploit-db.com/exploits/4569

References

• CVE Record
• NVD entry

Related

• CVE-2007-5070
• CVE-2007-5089
• CVE-2007-5069
• CVE-2007-5092
• CVE-2007-5068
• CVE-2007-5094