PT-2007-5994 · Ibm · Ibm Tivoli Storage Manager

Sebastian Apelt

·

Publicado

2007-09-28

·

Atualizado

2017-07-29

·

CVE-2007-4880

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager (TSM) clients versions 5.1 through 5.1.8.1 IBM Tivoli Storage Manager (TSM) clients versions 5.2 through 5.2.5.2 IBM Tivoli Storage Manager (TSM) clients versions 5.3 through 5.3.5.3 IBM Tivoli Storage Manager (TSM) clients versions 5.4 through 5.4.1.2
Description: The issue is related to a buffer overflow in the Client Acceptor Daemon (CAD), specifically in the dsmcad.exe component of certain IBM Tivoli Storage Manager (TSM) clients. This allows remote attackers to execute arbitrary code via crafted HTTP headers.
Recommendations: For versions 5.1 through 5.1.8.1, update to version 5.1.8.1 or later. For versions 5.2 through 5.2.5.2, update to version 5.2.5.2 or later. For versions 5.3 through 5.3.5.3, update to version 5.3.5.3 or later. For versions 5.4 through 5.4.1.2, update to version 5.4.1.2 or later.

Exploit

Correção

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-4880

Produtos afetados

Ibm Tivoli Storage Manager