PT-2015-1393 · Ibm · Ibm Tivoli Storage Manager Fastback

Lola Montez · Published 2015-06-30 · Updated 2016-12-28 · CVE-2015-1923

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions 6.1 through 6.1.12

Description The issue is caused by a buffer overflow in the dynamic memory of the Tivoli Storage Manager FastBack program. This can be exploited by a remote attacker to cause a denial of service, resulting in a daemon crash.

Recommendations For versions 6.1 through 6.1.11, update to version 6.1.12 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2015-10488

CVE-2015-1923

ZDI-15-264

Affected Products

Ibm Tivoli Storage Manager Fastback

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2015-1923 · Security Note
• http://www-01.ibm.com/support/docview.wss?uid=swg21959398 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-10488 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-15-264 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-15-264 · Note
• http://securitytracker.com/id/1032773 · Note
• http://securityfocus.com/bid/75445 · Note