CVE-2010-3759

2010-10-0522:00:06

CWE-94

[email protected]

web.nvd.nist.gov

cve-2010-3759

ibm tivoli storage manager

fastback

remote code execution

udp packet

nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.192 Low

EPSS

Percentile

96.3%

JSON

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE: this might overlap CVE-2010-3058.

Affected configurations

NVD

Node

ibmtivoli_storage_manager_fastbackMatch5.5.0

ibmtivoli_storage_manager_fastbackMatch5.5.1

ibmtivoli_storage_manager_fastbackMatch5.5.2

ibmtivoli_storage_manager_fastbackMatch5.5.2.0

ibmtivoli_storage_manager_fastbackMatch5.5.3.0

ibmtivoli_storage_manager_fastbackMatch5.5.4.0

ibmtivoli_storage_manager_fastbackMatch5.5.5.0

ibmtivoli_storage_manager_fastbackMatch5.5.6.0

ibmtivoli_storage_manager_fastbackMatch6.1.0.0

ibmtivoli_storage_manager_fastbackMatch6.1.0.1

CPENameOperatorVersion
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.1
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.2
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.2.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.3.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.4.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.5.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.6.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq6.1.0.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq6.1.0.1

CPE	Name	Operator	Version
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.1
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.2
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.2.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.3.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.4.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.5.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.6.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	6.1.0.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	6.1.0.1