IBM Tivoli Provisioning Manager OS Deployment < Interim Fix 3 HTTP Server Logging Functionality Remote Overflow

Critical Nessus Plugin ID 31052


The remote web server is prone to a buffer overflow attack.


The remote host is running IBM Tivoli Provisioning Manager for OS Deployment, for remote deployment and management of operating systems.

There is a buffer overflow vulnerability in the software's HTTP server, in its logging functionality. An unauthenticated, remote attacker may be able to leverage this issue to cause a denial of service or execute arbitrary code with SYSTEM privileges.


Upgrade to Tivoli Provisioning Manager for OS Deployment (build 025.52) or later.

See Also

Plugin Details

Severity: Critical

ID: 31052

File Name: ibm_tpmfosd_5103_if3.nasl

Version: $Revision: 1.17 $

Type: remote

Family: Web Servers

Published: 2008/02/13

Modified: 2016/10/27

Dependencies: 10107

Risk Information

Risk Factor: Critical


Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:tivoli_provisioning_manager_os_deployment

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2008/01/22

Reference Information

CVE: CVE-2008-0401

BID: 27387

OSVDB: 40481

Secunia: 28604

CWE: 119