CVE-2010-3759

2010-10-0522:00:06

CWE-94

[email protected]

web.nvd.nist.gov

cve-2010-3759

ibm tivoli storage manager

fastback

remote code execution

udp packet

nvd

7.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.192 Low

EPSS

Percentile

96.3%

JSON

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE: this might overlap CVE-2010-3058.

Affected configurations

NVD

Node

ibmtivoli_storage_manager_fastbackMatch5.5.0

ibmtivoli_storage_manager_fastbackMatch5.5.1

ibmtivoli_storage_manager_fastbackMatch5.5.2

ibmtivoli_storage_manager_fastbackMatch5.5.2.0

ibmtivoli_storage_manager_fastbackMatch5.5.3.0

ibmtivoli_storage_manager_fastbackMatch5.5.4.0

ibmtivoli_storage_manager_fastbackMatch5.5.5.0

ibmtivoli_storage_manager_fastbackMatch5.5.6.0

ibmtivoli_storage_manager_fastbackMatch6.1.0.0

ibmtivoli_storage_manager_fastbackMatch6.1.0.1

CPENameOperatorVersion
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.1
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.2
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.2.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.3.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.4.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.5.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq5.5.6.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq6.1.0.0
ibm:tivoli_storage_manager_fastbackibm tivoli storage manager fastbackeq6.1.0.1

CPE	Name	Operator	Version
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.1
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.2
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.2.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.3.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.4.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.5.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	5.5.6.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	6.1.0.0
ibm:tivoli_storage_manager_fastback	ibm tivoli storage manager fastback	eq	6.1.0.1