Detections
Analytics
IBM Tivoli Provisioning Manager OS Deployment < 5.1.0.3 Interim Fix 3 HTTP Server Logging Functionality Remote Overflow
critical Nessus Plugin ID 31052
Language:
Synopsis
The remote web server is prone to a buffer overflow attack.Description
The remote host is running IBM Tivoli Provisioning Manager for OS Deployment, for remote deployment and management of operating systems.There is a buffer overflow vulnerability in the software's HTTP server, in its logging functionality. An unauthenticated, remote attacker may be able to leverage this issue to cause a denial of service or execute arbitrary code with SYSTEM privileges.
Solution
Upgrade to Tivoli Provisioning Manager for OS Deployment 5.1.0.3 (build 025.52) or later.See Also
Plugin Details
Severity: Critical
ID: 31052
File Name: ibm_tpmfosd_5103_if3.nasl
Version: 1.19
Type: remote
Family: Web Servers
Published: 2/13/2008
Updated: 11/15/2018
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:ibm:tivoli_provisioning_manager_os_deployment
Exploit Ease: No known exploits are available
Patch Publication Date: 1/22/2008
Reference Information
CVE: CVE-2008-0401
BID: 27387