PT-2015-1393 · Ibm · Ibm Tivoli Storage Manager Fastback

Lola Montez · Publicado 2015-06-30 · Atualizado 2016-12-28 · CVE-2015-1923

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions 6.1 through 6.1.12

Description The issue is caused by a buffer overflow in the dynamic memory of the Tivoli Storage Manager FastBack program. This can be exploited by a remote attacker to cause a denial of service, resulting in a daemon crash.

Recommendations For versions 6.1 through 6.1.11, update to version 6.1.12 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-10488

CVE-2015-1923

ZDI-15-264

Produtos afetados

Ibm Tivoli Storage Manager Fastback

Referências · 7

• https://nvd.nist.gov/vuln/detail/CVE-2015-1923 · Nota de Segurança
• http://www-01.ibm.com/support/docview.wss?uid=swg21959398 · Aviso do Fabricante
• http://zerodayinitiative.com/advisories/ZDI-15-264 · Nota
• https://bdu.fstec.ru/vul/2015-10488 · Nota de Segurança
• http://securitytracker.com/id/1032773 · Nota
• https://zerodayinitiative.com/advisories/ZDI-15-264 · Nota de Segurança
• http://securityfocus.com/bid/75445 · Nota