Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2011-1220
HistoryJun 02, 2011 - 8:55 p.m.

CVE-2011-1220

2011-06-0220:55:02
CWE-119
[email protected]
web.nvd.nist.gov
1

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.974

Percentile

99.9%

JSON

Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field.

Affected configurations

Nvd
Node
ibmtivoli_management_frameworkMatch3.7.1
OR
ibmtivoli_management_frameworkMatch4.1
OR
ibmtivoli_management_frameworkMatch4.1.1
OR
ibmtivoli_management_frameworkMatch4.3.1

Related

checkpoint_advisories 1
cvelist 2
packetstorm 1
securityvulns 2
cve 2
prion 2
nessus 1
zdi 1
metasploit 1
exploitdb 1
nvd 1
checkpoint_advisories
checkpoint_advisories
IBM Tivoli Endpoint Manager POST Query Buffer Overflow (CVE-2011-1220)
2013-07-21 00:00:00
cvelist
cvelist
CVE-2011-1220
2011-06-02 20:00:00
CVE-2011-2330
2011-06-02 20:00:00
packetstorm
packetstorm
IBM Tivoli Endpoint Manager POST Query Buffer Overflow
2011-06-12 00:00:00
securityvulns
securityvulns
IBM Tivoli Endpoint buffer overflows
2011-06-07 00:00:00
ZDI-11-169: IBM Tivoli Endpoint lcfd.exe opts Argument Remote Code Execution Vulnerability
2011-06-02 00:00:00
cve
cve
CVE-2011-1220
2011-06-02 20:55:02
CVE-2011-2330
2011-06-02 20:55:04
prion
prion
Stack overflow
2011-06-02 20:55:00
Code injection
2011-06-02 20:55:00
nessus
nessus
IBM Tivoli Management Framework Endpoint addr URL Remote Buffer Overflow
2011-05-31 00:00:00
zdi
zdi
IBM Tivoli Endpoint lcfd.exe opts Argument Remote Code Execution Vulnerability
2011-05-31 00:00:00
metasploit
metasploit
IBM Tivoli Endpoint Manager POST Query Buffer Overflow
2011-06-11 23:48:18
exploitdb
exploitdb
IBM Tivoli Endpoint Manager - POST Query Buffer Overflow (Metasploit)
2011-06-12 00:00:00
nvd
nvd
CVE-2011-2330
2011-06-02 20:55:04

CVSS2

9

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.974

Percentile

99.9%

JSON
Related for NVD:CVE-2011-1220
checkpoint_advisories1cvelist2packetstorm1securityvulns2cve2prion2nessus1zdi1metasploit1exploitdb1nvd1