IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) allows buffer overflow via HTTP request

Overview

The IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) contains a buffer overflow vulnerability in the web server component. This vulnerability may allow an attacker to execute arbitrary code with SYSTEM privileges or cause a denial of service.

Description

IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) is a network boot server that facilitates central management of networked workstations. IBM TPMfOSD contains a buffer overflow vulnerability within the logging functionality of the web server component. A remote, unauthenticated attacker may be able to exploit this vulnerability by sending a specially crafted HTTPS (443/TCP) request to a target machine.

---

Impact

A remote, unauthenticated attacker could execute arbitrary code with SYSTEM privileges or crash the server process, causing a denial of service.

---

Solution

Apply an Update

IBM has released Interim Fix 3 Version 5.1.0.3 to address this issue.

---

Block or Restrict Access

Block or restrict access to the web server component from untrusted hosts and networks.

---

Vendor Information

158609

Filter by status: All Affected Not Affected Unknown

Filter by content: __ Additional information available

__ Sort by: Status Alphabetical

Expand all

Javascript is disabled. Click here to view vendors.

IBM Corporation __ Affected

Updated: March 06, 2008

Status

Affected

Vendor Statement

We have not received a statement from the vendor.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

Please see <http://www-1.ibm.com/support/docview.wss?uid=swg24018010&gt;.

If you have feedback, comments, or additional information about this vulnerability, please send us [email](<mailto:[email protected]?Subject=VU%23158609 Feedback>).

CVSS Metrics

Group	Score	Vector
Base
Temporal
Environmental

References

• <http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=647&gt;
• <http://www-1.ibm.com/support/docview.wss?uid=swg24018010&gt;
• <http://securitytracker.com/alerts/2008/Jan/1019249.html&gt;
• <http://www.securityfocus.com/bid/27387&gt;
• <http://secunia.com/advisories/28604&gt;

Acknowledgements

Thanks to iDefense Labs for reporting this vulnerability.

This document was written by John Hollenberger.

Other Information

CVE IDs:	CVE-2008-0401
Severity Metric:	8.17 Date Public: