PT-2016-5292 · Ibm · Ibm Tivoli Monitoring

Mathijs Schmittmann · Published 2016-12-01 · Updated 2016-12-01 · CVE-2016-2946

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions IBM Tivoli Monitoring (ITM) versions 6.2.2 through 6.2.2 FP8 IBM Tivoli Monitoring (ITM) versions 6.2.3 through 6.2.3 FP4 IBM Tivoli Monitoring (ITM) versions 6.3.0 through 6.3.0 FP1

Description A stack-based buffer overflow issue exists in the ax Shared Libraries component of the Agent in IBM Tivoli Monitoring. This issue allows local users to potentially gain privileges via unspecified vectors.

Recommendations For IBM Tivoli Monitoring (ITM) versions 6.2.2 through 6.2.2 FP8, update to FP9 or later. For IBM Tivoli Monitoring (ITM) versions 6.2.3 through 6.2.3 FP4, update to FP5 or later. For IBM Tivoli Monitoring (ITM) versions 6.3.0 through 6.3.0 FP1, update to FP2 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2016-2946

Affected Products

Ibm Tivoli Monitoring

References · 5

• http://www-01.ibm.com/support/docview.wss?uid=swg21984578 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-2946 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2946 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845 · Vendor Advisory
• http://securityfocus.com/bid/92389 · Note