IBM Tivoli Storage Manager < 5.4.2.6 / 5.5.1.8 Overflow

high Nessus Network Monitor Plugin ID 4953

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is running the IBM Tivoli Storage Manager.

This version of TSM contains a client that is prone to a remote buffer overflow. An attacker exploiting this flaw would need the ability to send malicious data to the service. Successful exploitation would result in the attacker executing arbitrary code on the system.

Solution

Upgrade to version 5.4.2 6, 5.5.1.8 or higher.

Plugin Details

Severity: High

ID: 4953

Family: CGI

Published: 3/9/2009

Updated: 3/6/2019

Nessus ID: 35906

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS v3

Risk Factor: High

Base Score: 7.3

Temporal Score: 6.4

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:ibm:tivoli_storage_manager_hsm

Reference Information

CVE: CVE-2009-0869

BID: 34034

Detections

Analytics