{"api_version":"1","generated_at":"2026-07-23T09:13:15+00:00","cve":"CVE-2007-5082","urls":{"html":"https://cve.report/CVE-2007-5082","api":"https://cve.report/api/cve/CVE-2007-5082.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-5082","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-5082"},"summary":{"title":"CVE-2007-5082","description":"Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-10-01 20:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"10","severity":"","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"}}],"references":[{"url":"http://secunia.com/advisories/26914","name":"http://secunia.com/advisories/26914","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"title":"CA BrightStor Hierarchical Storage Manager CsAgent Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp","name":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601","name":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://securitytracker.com/id?1018747","name":"http://securitytracker.com/id?1018747","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityTracker: CA BrightStor Hierarchical Storage Manager Bugs Let Remote Users Inject SQL Commands or Execute Arbitrary Code","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded","name":"http://www.securityfocus.com/archive/1/480808/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2007/3275","name":"http://www.vupen.com/english/advisories/2007/3275","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36825","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36825","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690","name":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"title":"CA BrightStor Hierarchical Storage Manager CsAgent arbitrary code execution vulnerabilities - CA","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25823","name":"http://www.securityfocus.com/bid/25823","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Computer Associates BrightStor Hierarchical Storage Manager CsAgent Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-16","name":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-16","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"TippingPoint | DVLabs |","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-5082","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5082","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"5082","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"broadcom","cpe5":"brightstor_hierarchical_storage_manager","cpe6":"11.5","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:17:28.200Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"ca-brightstor-csagent-bo(36825)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36825"},{"name":"26914","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/26914"},{"name":"20070927 Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601"},{"name":"20070927 [CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded"},{"name":"ADV-2007-3275","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2007/3275"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-16"},{"name":"25823","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25823"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp"},{"name":"1018747","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1018747"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-09-27T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"ca-brightstor-csagent-bo(36825)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36825"},{"name":"26914","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/26914"},{"name":"20070927 Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities","tags":["third-party-advisory","x_refsource_IDEFENSE"],"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601"},{"name":"20070927 [CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded"},{"name":"ADV-2007-3275","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2007/3275"},{"tags":["x_refsource_CONFIRM"],"url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-16"},{"name":"25823","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25823"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690"},{"tags":["x_refsource_CONFIRM"],"url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp"},{"name":"1018747","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1018747"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-5082","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"ca-brightstor-csagent-bo(36825)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36825"},{"name":"26914","refsource":"SECUNIA","url":"http://secunia.com/advisories/26914"},{"name":"20070927 Computer Associates BrightStor HSM r11.5 Multiple Vulnerabilities","refsource":"IDEFENSE","url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=601"},{"name":"20070927 [CAID 35690, 35691, 35692]: CA BrightStor Hierarchical Storage Manager CsAgent Multiple Vulnerabilities","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/480808/100/0/threaded"},{"name":"ADV-2007-3275","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2007/3275"},{"name":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-16","refsource":"CONFIRM","url":"http://dvlabs.tippingpoint.com/advisory/TPTI-07-16"},{"name":"25823","refsource":"BID","url":"http://www.securityfocus.com/bid/25823"},{"name":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690","refsource":"CONFIRM","url":"http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35690"},{"name":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp","refsource":"CONFIRM","url":"http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp"},{"name":"1018747","refsource":"SECTRACK","url":"http://securitytracker.com/id?1018747"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-5082","datePublished":"2007-10-01T20:00:00.000Z","dateReserved":"2007-09-25T00:00:00.000Z","dateUpdated":"2024-08-07T15:17:28.200Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-10-01 20:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:C/I:C/A:C","baseScore":10,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","availabilityImpact":"COMPLETE"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":10,"acInsufInfo":false,"obtainAllPrivilege":true,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:broadcom:brightstor_hierarchical_storage_manager:11.5:*:*:*:*:*:*:*","matchCriteriaId":"DFA3B0BE-B154-49CB-9456-4ECE828E02E2"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"5082","Ordinal":"1","Title":"CVE-2007-5082","CVE":"CVE-2007-5082","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"5082","Ordinal":"1","NoteData":"Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.","Type":"Description","Title":"CVE-2007-5082"},{"CveYear":"2007","CveId":"5082","Ordinal":"2","NoteData":"2007-10-01","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"5082","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}