Evil-DB LogoEvil-DB
← All CVEs

CVE-2007-4880

high · 10

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.

10
CVSS
75.9%
EPSS (exploit prob.)
100th
EPSS percentile
2007-09-28
Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
ibmtivoli_storage_manager_client5.1
ibmtivoli_storage_manager_client5.1.8.0
ibmtivoli_storage_manager_client5.2
ibmtivoli_storage_manager_client5.2.5.1
ibmtivoli_storage_manager_client5.3
ibmtivoli_storage_manager_client5.3.5.2
ibmtivoli_storage_manager_client5.4
ibmtivoli_storage_manager_client5.4.1.1

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2007-4880