CVE-2007-5082

50Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 63%

from disclosure to weapon26 days

Published on NVDOct 1

1st PoC+26d

metasploitSep 27

exploitation probability

63%top 1% of all CVEs

observed exploitation

nono source reports it

2 public exploit(s)

Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/4569unverified exploitdbwww.exploit-db.com/exploits/16402unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

References

http://dvlabs.tippingpoint.com/advisory/TPTI-07-16 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601 http://secunia.com/advisories/26914 http://securitytracker.com/id?1018747 https://exchange.xforce.ibmcloud.com/vulnerabilities/36825 http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690 http://www.securityfocus.com/archive/1/480808/100/0/threaded http://www.securityfocus.com/bid/25823 http://www.vupen.com/english/advisories/2007/3275