The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to write to arbitrary files, and subsequently execute these files, via a crafted TCP packet to an unspecified port.
http://www.zerodayinitiative.com/advisories/ZDI-15-269
http://www.securitytracker.com/id/1032773