CVE-2010-3754 The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields....
HighCVSS 10.0
EPSS 4.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields to determine the content and length of data copied to memory, which allows remote attackers to execute arbitrary code via a crafted packet. NOTE: this might overlap CVE-2010-3059.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli storage manager fastback | = 5.5.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.1 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.2 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.2.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.3.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.4.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.5.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.6.0 | No fix listed |
| ibm tivoli storage manager fastback | = 6.1.0.0 | No fix listed |
| ibm tivoli storage manager fastback | = 6.1.0.1 | No fix listed |
References
- IC69883 vendor-advisory
- www.ibm.com vendor-advisory
- 20100929 ZDI-10-182: IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities mailing-list
- zerodayinitiative.com