CVE-2008-0247 Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a pack...
HighCVSS 10.0
EPSS 8.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli storage manager express | <= 5.3 | No fix listed |
References
- 28440 patch third-party-advisory vendor-advisory
- www-1.ibm.com patch
- 20080114 ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability mailing-list
- 27235 patch vdb-entry
- 1019182 vdb-entry
- ADV-2008-0106 vdb-entry vendor-advisory
- www.zerodayinitiative.com
- ibm-tsmexpressserver-bo(39604) vdb-entry