CVE-2007-5082

50Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendepss 63%

da publicação à arma26 dias

Publicada no NVD1 de out.

1ª PoC+26d

metasploit27 de set.

probabilidade de exploração

63%top 1% das CVEs

exploração observada

nãonenhuma fonte reporta

2 exploit(s) público(s)

Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.

Produtos afetados

n/a · n/a

PoCs públicas encontradas — 2

exploitdbwww.exploit-db.com/exploits/4569não verificado exploitdbwww.exploit-db.com/exploits/16402não verificado

⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.

Referências

http://dvlabs.tippingpoint.com/advisory/TPTI-07-16 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601 http://secunia.com/advisories/26914 http://securitytracker.com/id?1018747 https://exchange.xforce.ibmcloud.com/vulnerabilities/36825 http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690 http://www.securityfocus.com/archive/1/480808/100/0/threaded http://www.securityfocus.com/bid/25823 http://www.vupen.com/english/advisories/2007/3275