CVE-2007-5084

Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others.

• CWE-89

• http://dvlabs.tippingpoint.com/advisory/TPTI-07-17
• http://secunia.com/advisories/26914Vendor Advisory
• http://securitytracker.com/id?1018747
• http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.aspPatch
• http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692Patch
• http://www.securityfocus.com/archive/1/480808/100/0/threaded
• http://www.securityfocus.com/bid/25823
• http://www.vupen.com/english/advisories/2007/3275Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36828
• http://dvlabs.tippingpoint.com/advisory/TPTI-07-17
• http://secunia.com/advisories/26914Vendor Advisory
• http://securitytracker.com/id?1018747
• http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.aspPatch
• http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692Patch
• http://www.securityfocus.com/archive/1/480808/100/0/threaded
• http://www.securityfocus.com/bid/25823
• http://www.vupen.com/english/advisories/2007/3275Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36828

Published

Oct 1, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-5078Multiple cross-site scripting (XSS) vulnerabilities in eGov …
• CVE-2007-5079Red Hat Enterprise Linux 4 does not properly compile and lin…
• CVE-2007-5080Integer overflow in RealNetworks RealPlayer 10 and 10.5, Rea…
• CVE-2007-5081Heap-based buffer overflow in RealNetworks RealPlayer 8, 10,…
• CVE-2007-5082Multiple stack-based buffer overflows in Computer Associates…
• CVE-2007-5083Multiple integer overflows in Computer Associates (CA) Brigh…
• CVE-2007-5085Unspecified vulnerability in the management EJB (MEJB) in Ap…
• CVE-2007-5086Kaspersky Anti-Virus (KAV) and Internet Security 7.0 build 1…
• CVE-2007-5087The ATM module in the Linux kernel before 2.4.35.3, when CLI…
• CVE-2007-5088Cross-site scripting (XSS) vulnerability in search/cust_bill…
• CVE-2007-5089PHP remote file inclusion vulnerability in php-inc/log.inc.p…
• CVE-2007-5090Unspecified vulnerability in IBM Rational ClearQuest (CQ), w…