CVE-2002-1011

2002-10-0404:00:00

[email protected]

web.nvd.nist.gov

cve-2002-1011

buffer overflow

web server

tivoli management framework

endpoint

denial of service

arbitrary code execution

remote attack

8 High

AI Score

Confidence

High

7.5 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.03 Low

EPSS

Percentile

90.9%

JSON

Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.

Affected configurations

NVD

Node

ibmtivoli_management_frameworkMatch3.6

ibmtivoli_management_frameworkMatch3.6.1

ibmtivoli_management_frameworkMatch3.7

ibmtivoli_management_frameworkMatch3.7.1

CPENameOperatorVersion
ibm:tivoli_management_frameworkibm tivoli management frameworkeq3.6
ibm:tivoli_management_frameworkibm tivoli management frameworkeq3.6.1
ibm:tivoli_management_frameworkibm tivoli management frameworkeq3.7
ibm:tivoli_management_frameworkibm tivoli management frameworkeq3.7.1

CPE	Name	Operator	Version
ibm:tivoli_management_framework	ibm tivoli management framework	eq	3.6
ibm:tivoli_management_framework	ibm tivoli management framework	eq	3.6.1
ibm:tivoli_management_framework	ibm tivoli management framework	eq	3.7
ibm:tivoli_management_framework	ibm tivoli management framework	eq	3.7.1