CVE-2007-4880 Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2....
HighCVSS 10.0
EPSS 75.9%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli storage manager client | = 5.1 | No fix listed |
| ibm tivoli storage manager client | = 5.1.8.0 | No fix listed |
| ibm tivoli storage manager client | = 5.2 | No fix listed |
| ibm tivoli storage manager client | = 5.2.5.1 | No fix listed |
| ibm tivoli storage manager client | = 5.3 | No fix listed |
| ibm tivoli storage manager client | = 5.3.5.2 | No fix listed |
| ibm tivoli storage manager client | = 5.4 | No fix listed |
| ibm tivoli storage manager client | = 5.4.1.1 | No fix listed |
References
- 38161 vdb-entry
- 26883 third-party-advisory vendor-advisory
- 3184 third-party-advisory
- www-1.ibm.com patch
- IC52905 patch vendor-advisory
- 20070924 ZDI-07-054: IBM Tivoli Storage Manager Express CAD Service Buffer Overflow Vulnerability mailing-list
- 25743 patch vdb-entry
- 1018725 vdb-entry
- ADV-2007-3228 vdb-entry
- www.zerodayinitiative.com
- ibm-tsm-cad-bo(36700) vdb-entry