CVE-2007-5082
BrightStor Hierarchical Storage Manager - Remote Code Execution via CsAgent Service Command
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2007-5082.
PoCs published by Metasploit, Nice Name Crew, toto, including Metasploit module exploits/windows/brightstor/hsmserver.
AI-analyzed exploit summary This is a Metasploit module exploiting a stack buffer overflow in CA BrightStor HSM via a crafted TCP request to port 2000. It leverages SEH overwrites and a hardcoded return address to achieve remote code execution.
Description
Multiple stack-based buffer overflows in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary code via unspecified CsAgent service commands with certain opcodes, related to missing validation of a length parameter.
Exploits (3)
This is a Metasploit module exploiting a stack buffer overflow in CA BrightStor HSM via a crafted TCP request to port 2000. It leverages SEH overwrites and a hardcoded return address to achieve remote code execution.
This exploit targets a remote stack-based overflow in CA BrightStor HSM <= r11.5. It sends a series of crafted packets to trigger the vulnerability, leading to a denial-of-service (DoS) condition.
This Metasploit module exploits a stack buffer overflow in CA BrightStor HSM 11.5 via a crafted TCP request to port 2000, allowing arbitrary code execution. It uses a SEH bypass and a hardcoded return address in fpparser.dll.