Lucene search

K
cve[email protected]CVE-2010-3058
HistoryOct 03, 2022 - 4:20 p.m.

CVE-2010-3058

2022-10-0316:20:58
CWE-399
web.nvd.nist.gov
26
ibm
tivoli
storage manager
fastback
vulnerability
cve-2010-3058
nvd
udp
remote attackers
memory overwrite
denial of service

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.192 Low

EPSS

Percentile

96.3%

The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service (application hang), via unspecified vectors.

Affected configurations

NVD
Node
ibmtivoli_storage_manager_fastbackMatch5.5.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.1
OR
ibmtivoli_storage_manager_fastbackMatch5.5.2
OR
ibmtivoli_storage_manager_fastbackMatch5.5.2.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.3.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.4.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.5.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.6.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.0.0

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.2 High

AI Score

Confidence

Low

0.192 Low

EPSS

Percentile

96.3%