CVE-2007-5082

Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.

• CWE-119

• http://dvlabs.tippingpoint.com/advisory/TPTI-07-16
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601
• http://secunia.com/advisories/26914Patch, Vendor Advisory
• http://securitytracker.com/id?1018747
• http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.aspPatch
• http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690Patch
• http://www.securityfocus.com/archive/1/480808/100/0/threaded
• http://www.securityfocus.com/bid/25823
• http://www.vupen.com/english/advisories/2007/3275Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36825
• http://dvlabs.tippingpoint.com/advisory/TPTI-07-16
• http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601
• http://secunia.com/advisories/26914Patch, Vendor Advisory
• http://securitytracker.com/id?1018747
• http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.aspPatch
• http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690Patch
• http://www.securityfocus.com/archive/1/480808/100/0/threaded
• http://www.securityfocus.com/bid/25823
• http://www.vupen.com/english/advisories/2007/3275Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36825

Published

Oct 1, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5071Incomplete blacklist vulnerability in upload_img_cgi.php in …
• CVE-2007-5072Multiple cross-site scripting (XSS) vulnerabilities in Simpl…
• CVE-2007-5078Multiple cross-site scripting (XSS) vulnerabilities in eGov …
• CVE-2007-5079Red Hat Enterprise Linux 4 does not properly compile and lin…
• CVE-2007-5080Integer overflow in RealNetworks RealPlayer 10 and 10.5, Rea…
• CVE-2007-5081Heap-based buffer overflow in RealNetworks RealPlayer 8, 10,…
• CVE-2007-5083Multiple integer overflows in Computer Associates (CA) Brigh…
• CVE-2007-5084Multiple SQL injection vulnerabilities in Computer Associate…
• CVE-2007-5085Unspecified vulnerability in the management EJB (MEJB) in Ap…
• CVE-2007-5086Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 1…
• CVE-2007-5087The ATM module in the Linux kernel before 2.4.35.3, when CLI…
• CVE-2007-5088Cross-site scripting (XSS) vulnerability in search/cust_bill…