CVE-2007-4880: IBM Tivoli Storage Manager Client

High severity, CVSS 10.0. EPSS: 75.9% chance of exploitation in the next 30 days.

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.

Affected products

• IBM Tivoli Storage Manager Client: version 5.1 only; version 5.1.8.0 only; version 5.2 only; version 5.2.5.1 only; version 5.3 only; version 5.3.5.2 only; …

Published 2007-09-28. Last modified 2026-06-16.