peter bassill · operator
$ cve CVE-2007-4880 JSON

CVE-2007-4880 EXPLOIT

10.0
HIGH · CVSS 2.0 · EPSS 75.9% (pctl 100)

Patch early

A public exploit exists.

Description

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.

Scoring

CVSS10.0 (HIGH, v2.0)
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS75.95% — more likely to be exploited than 100% of all CVEs
WeaknessCWE-119
On CISA KEVno
Public exploityes
Published2007-09-28
Last modified2026-06-16

Affected (1)

VendorProduct
ibmtivoli storage manager client

Public exploits

SourceTitleDate
exploit-dbIBM Tivoli Storage Manager Express CAD Service - Remote Buffer Overflow (Metasploit) (2)2010-05-09
exploit-dbIBM Tivoli Storage Manager 5.3 - Express CAD Service Buffer Overflow2007-10-27

References

→ the Explorer  ·  watch your stack  ·  NVD