PT-2015-1391 · Ibm · Ibm Tivoli Storage Manager Fastback

Brian Gorenc · Publicado 2015-06-30 · Atualizado 2016-12-28 · CVE-2015-1949

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions 6.1 through 6.1.11

Description The issue is related to a lack of input sanitization in the Tivoli Storage Manager FastBack program, which can be exploited by a remote attacker to execute arbitrary code with system privileges. The exploitation allows attackers to execute arbitrary commands with SYSTEM privileges.

Recommendations For IBM Tivoli Storage Manager FastBack versions 6.1 through 6.1.11, update to version 6.1.12 or later to resolve the issue.

Correção

Command Injection

Enumeração de Fraquezas

CWE-77

Identificadores relacionados

BDU:2015-10486

CVE-2015-1949

ZDI-15-271

Produtos afetados

Ibm Tivoli Storage Manager Fastback

Referências · 7

• http://www-01.ibm.com/support/docview.wss?uid=swg21959398 · Aviso do Fabricante
• http://securityfocus.com/bid/75459 · Nota
• https://bdu.fstec.ru/vul/2015-10486 · Nota de Segurança
• https://zerodayinitiative.com/advisories/ZDI-15-271 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2015-1949 · Nota de Segurança
• http://zerodayinitiative.com/advisories/ZDI-15-271 · Nota
• http://securitytracker.com/id/1032773 · Nota