PT-2007-5994 · Ibm · Ibm Tivoli Storage Manager

Sebastian Apelt

·

Published

2007-09-28

·

Updated

2017-07-29

·

CVE-2007-4880

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager (TSM) clients versions 5.1 through 5.1.8.1 IBM Tivoli Storage Manager (TSM) clients versions 5.2 through 5.2.5.2 IBM Tivoli Storage Manager (TSM) clients versions 5.3 through 5.3.5.3 IBM Tivoli Storage Manager (TSM) clients versions 5.4 through 5.4.1.2
Description: The issue is related to a buffer overflow in the Client Acceptor Daemon (CAD), specifically in the dsmcad.exe component of certain IBM Tivoli Storage Manager (TSM) clients. This allows remote attackers to execute arbitrary code via crafted HTTP headers.
Recommendations: For versions 5.1 through 5.1.8.1, update to version 5.1.8.1 or later. For versions 5.2 through 5.2.5.2, update to version 5.2.5.2 or later. For versions 5.3 through 5.3.5.3, update to version 5.3.5.3 or later. For versions 5.4 through 5.4.1.2, update to version 5.4.1.2 or later.

Exploit

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-4880

Affected Products

Ibm Tivoli Storage Manager