CVE-2007-5084

BrightStor Hierarchical Storage Manager < 11.5 - SQL Injection via CsAgent Service Commands

Title source: llm

Description

Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others.

References (9)

Core 9

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/26914

Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq

http://www.securityfocus.com/archive/1/480808/100/0/threaded

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2007/3275

Patch x_refsource_confirm

http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/25823

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/36828

Patch x_refsource_confirm

http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1018747

Vendor Advisory x_refsource_misc

http://dvlabs.tippingpoint.com/advisory/TPTI-07-17

Scores

EPSS 0.0168

EPSS Percentile 82.4%

Details

CWE

CWE-89

Status published

Products (1)

broadcom/brightstor_hierarchical_storage_manager < 11.5

Published Oct 01, 2007

Tracked Since Feb 18, 2026