Lucene search

K
nvd[email protected]NVD:CVE-2007-4880
HistorySep 28, 2007 - 12:17 a.m.

CVE-2007-4880

2007-09-2800:17:00
CWE-119
web.nvd.nist.gov

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.967 High

EPSS

Percentile

99.7%

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.

Affected configurations

NVD
Node
ibmtivoli_storage_manager_clientMatch5.1
OR
ibmtivoli_storage_manager_clientMatch5.1.8.0
OR
ibmtivoli_storage_manager_clientMatch5.2
OR
ibmtivoli_storage_manager_clientMatch5.2.5.1
OR
ibmtivoli_storage_manager_clientMatch5.3
OR
ibmtivoli_storage_manager_clientMatch5.3.5.2
OR
ibmtivoli_storage_manager_clientMatch5.4
OR
ibmtivoli_storage_manager_clientMatch5.4.1.1

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

7.6 High

AI Score

Confidence

Low

0.967 High

EPSS

Percentile

99.7%