CVE-2007-5084

Multiple SQL injection vulnerabilities in Computer Associates (CA) BrightStor Hierarchical Storage Manager (HSM) before r11.6 allow remote attackers to execute arbitrary SQL commands via CsAgent service commands with opcodes (1) 0x07, (2) 0x08, (3) 0x09, (4) 0x1E, (5) 0x32, (6) 0x36, (7) 0x40, and possibly others.

Link	Resource
http://supportconnectw.ca.com/public/bstorhsm/infodocs/bstorhsm-secnot.asp	Patch
http://www.ca.com/us/securityadvisor/vulninfo/vuln.aspx?id=35692	Patch
http://www.securityfocus.com/bid/25823
http://securitytracker.com/id?1018747
http://secunia.com/advisories/26914	Vendor Advisory
http://dvlabs.tippingpoint.com/advisory/TPTI-07-17
http://www.vupen.com/english/advisories/2007/3275	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/36828
http://www.securityfocus.com/archive/1/480808/100/0/threaded

Configuration 1

cpe:2.3:a:broadcom:brightstor_hierarchical_storage_manager:*:*:*:*:*:*:*:*

---

Published : 2007-10-01 08:17

Updated : 2021-04-07 06:19

---

NVD link : CVE-2007-5084

Mitre link : CVE-2007-5084

No products.

CWE-89