PT-2015-1328 · Ibm · Ibm Tivoli Storage Manager Fastback

Published 2015-04-03 · Updated 2015-05-26 · CVE-2015-0120

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack version 6.1 before 6.1.11.1

Description The issue is related to a buffer overflow in the FastBackMount process, which can be exploited remotely. This may have unspecified impact on the system.

Recommendations For IBM Tivoli Storage Manager FastBack version 6.1 before 6.1.11.1, update to version 6.1.11.1 or later to resolve the issue. As a temporary workaround, consider restricting access to the FastBackMount process to minimize the risk of exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-10415

CVE-2015-0120

ZDI-15-119

Affected Products

Ibm Tivoli Storage Manager Fastback

References · 4

• http://www-01.ibm.com/support/docview.wss?uid=swg21700549 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10415 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-0120 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-119 · Security Note