IBM Tivoli Storage Manager < 5.4.2.6 / 5.5.1.8 Overflow

High Nessus Network Monitor Plugin ID 4953

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is running the IBM Tivoli Storage Manager.

This version of TSM contains a client that is prone to a remote buffer overflow. An attacker exploiting this flaw would need the ability to send malicious data to the service. Successful exploitation would result in the attacker executing arbitrary code on the system.

Solution

Upgrade to version 5.4.2 6, 5.5.1.8 or higher.

See Also

http://www-01.ibm.com/support/docview.wss?uid=swg21329223

Plugin Details

Severity: High

ID: 4953

File Name: 4953.prm

Family: CGI

Published: 2009/03/09

Modified: 2016/01/15

Dependencies: 1442, 4728

Risk Information

Risk Factor: High

CVSSv2

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Reference Information

CVE: CVE-2009-0869

BID: 34034