CVE-2007-5083

BrightStor HSM CsAgent contains multiple remote vulnerabilities (CVE-2007-5082/5083/5084) in r11.5 that allow an unauthenticated attacker to execute arbitrary code via CsAgent commands over TCP port 2000 due to stack/heap buffer and integer overflow issues. iDefense/CVEs describe several buffer o...

CVE-2007-5084

CA BrightStor Hierarchical Storage Manager (HSM) before r11.6 is affected by multiple SQL injection vulnerabilities in the CsAgent service. The flaws reside in the CsAgent opcode handling, where certain commands (notably opcodes 0x07, 0x08, 0x09, 0x1E, 0x32, 0x36, 0x40 and possibly others) fail t...

CVE-2007-5082

CVE-2007-5082 describes multiple stack-based buffer overflows in Computer Associates’ BrightStor HSM prior to r11.6, affecting the CsAgent service over TCP. A remote attacker can cause arbitrary code execution by sending crafted CsAgent commands with certain opcodes, due to missing validation of ...