CVE-2010-3759 FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP p...
HighCVSS 10.0
EPSS 4.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE: this might overlap CVE-2010-3058.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ibm tivoli storage manager fastback | = 5.5.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.1 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.2 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.2.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.3.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.4.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.5.0 | No fix listed |
| ibm tivoli storage manager fastback | = 5.5.6.0 | No fix listed |
| ibm tivoli storage manager fastback | = 6.1.0.0 | No fix listed |
| ibm tivoli storage manager fastback | = 6.1.0.1 | No fix listed |
References
- IC69883 vendor-advisory
- www.ibm.com vendor-advisory
- 20100929 ZDI-10-179: IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability mailing-list
- zerodayinitiative.com