CVE-2008-4563 Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5....
HighCVSS 10.0
EPSS 29.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli storage manager | = 5.2 | No fix listed |
| ibm tivoli storage manager | = 5.3 | No fix listed |
| ibm tivoli storage manager | = 5.3.0 | No fix listed |
| ibm tivoli storage manager | = 5.3.1 | No fix listed |
| ibm tivoli storage manager | = 5.3.2 | No fix listed |
| ibm tivoli storage manager | = 5.3.2.4 | No fix listed |
| ibm tivoli storage manager | = 5.3.3 | No fix listed |
| ibm tivoli storage manager | = 5.3.4 | No fix listed |
| ibm tivoli storage manager | = 5.3.5.1 | No fix listed |
| ibm tivoli storage manager | = 5.4.0 | No fix listed |
| ibm tivoli storage manager | = 5.4.1 | No fix listed |
| ibm tivoli storage manager | = 5.4.2 | No fix listed |
| ibm tivoli storage manager | = 5.4.2.2 | No fix listed |
| ibm tivoli storage manager | = 5.4.2.3 | No fix listed |
| ibm tivoli storage manager | = 5.4.2.4 | No fix listed |
| ibm tivoli storage manager | = 5.4.4.0 | No fix listed |
| ibm tivoli storage manager express | = 5.3 | No fix listed |
| ibm tivoli storage manager express | = 5.3.3.0 | No fix listed |
| ibm tivoli storage manager express | = 5.3.6.4 | No fix listed |
| ibm tivoli storage manager express | = 5.3.7.3 | No fix listed |
References
- 20090310 Assurent VR - IBM Tivoli Storage Manager Express Backup Server Heap Corruption mailing-list
- 20090310 IBM Tivoli Storage Manager Express Heap Buffer Overflow Vulnerability third-party-advisory
- 52617 vdb-entry
- 34245 third-party-advisory vendor-advisory
- 1021837 vdb-entry
- www-01.ibm.com patch vendor-advisory
- 34077 vdb-entry
- ADV-2009-0669 vdb-entry vendor-advisory
- tivoli-tsm-adsmdll-bo(49188) vdb-entry