Stack-Based Buffer Overflow in IBM Tivoli Storage Manager FastBack
CVE-2015-4933

Currently unrated

Key Information:

Vendor

IBM
Status
Tivoli Storage Manager Fastback
Vendor
CVE Published:
3 August 2015

What is CVE-2015-4933?

The vulnerability involves a stack-based buffer overflow in the server component of IBM Tivoli Storage Manager FastBack 6.1, prior to version 6.1.12.1. This flaw allows remote attackers to execute arbitrary code by sending a specially crafted packet to the server. The affected version does not adequately validate input, leading to the potential exploitation of this vulnerability, distinct from other related CVEs.

References

http://www.securityfocus.com/bid/76111
vdb-entryx_refsource_BID
http://www-01.ibm.com/support/docview.wss?uid=swg21961928
x_refsource_CONFIRM
http://www.zerodayinitiative.com/advisories/ZDI-15-374
x_refsource_MISC

EPSS Score

32% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2015-4933 : Stack-Based Buffer Overflow in IBM Tivoli Storage Manager FastBack