PT-2012-2398 · Ibm · Ibm Cognos Tm1

Publicado 2012-05-04 · Atualizado 2017-08-29 · CVE-2012-0202

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Cognos TM1 versions 9.4.x through 9.5.x before 9.5.2 FP2

Description The issue is related to multiple stack-based buffer overflows in the tm1admsd.exe component of the Admin Server. This can be exploited by remote attackers using crafted data, potentially leading to a denial of service (causing the daemon to crash) or possibly allowing the execution of arbitrary code.

Recommendations For versions 9.4.x through 9.5.x before 9.5.2 FP2, update to version 9.5.2 FP2 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2012-0202

ZDI-12-101

Produtos afetados

Ibm Cognos Tm1

Referências · 9

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ibm_cognos_tm1admsd_bof.rb · Exploit
• 🔥 https://exploit-db.com/exploits/23969 · Exploit
• https://zerodayinitiative.com/advisories/ZDI-12-101 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg24032166 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21590314 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2012-0202 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/73182 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg24032165 · Aviso do Fabricante
• http://www-01.ibm.com/support/docview.wss?uid=swg24032164 · Aviso do Fabricante