CVE-2007-5082 EXPLOIT
10.0
HIGH · CVSS 2.0 · EPSS 63.5% (pctl 99)
Patch early
A public exploit exists.
Description
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.
Scoring
| CVSS | 10.0 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
| EPSS | 63.46% — more likely to be exploited than 99% of all CVEs |
| Weakness | CWE-119 |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-10-01 |
| Last modified | 2026-06-16 |
Affected (1)
| Vendor | Product |
|---|---|
| broadcom | brightstor hierarchical storage manager |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | CA BrightStor - HSM Buffer Overflow (Metasploit) | 2010-05-09 |
| exploit-db | CA BrightStor HSM r11.5 - Remote Stack Overflow / Denial of Service | 2007-10-27 |
References
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-16
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601
- http://secunia.com/advisories/26914
- http://securitytracker.com/id?1018747
- http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp
- http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690
- http://www.securityfocus.com/archive/1/480808/100/0/threaded
- http://www.securityfocus.com/bid/25823
- http://www.vupen.com/english/advisories/2007/3275
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36825
- http://dvlabs.tippingpoint.com/advisory/TPTI-07-16
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601
- http://secunia.com/advisories/26914
- http://securitytracker.com/id?1018747
- http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp
- http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690
- http://www.securityfocus.com/archive/1/480808/100/0/threaded
- http://www.securityfocus.com/bid/25823
- http://www.vupen.com/english/advisories/2007/3275
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36825
→ the Explorer · watch your stack · NVD