Code injection

2010-10-0522:00:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.192 Low

EPSS

Percentile

96.3%

JSON

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE: this might overlap CVE-2010-3058.

CPENameOperatorVersion
tivoli_storage_manager_fastbackeq6.1.0.0
tivoli_storage_manager_fastbackeq6.1.0.1
tivoli_storage_manager_fastbackeq5.5.3.0
tivoli_storage_manager_fastbackeq5.5.0
tivoli_storage_manager_fastbackeq5.5.4.0
tivoli_storage_manager_fastbackeq5.5.5.0
tivoli_storage_manager_fastbackeq5.5.2
tivoli_storage_manager_fastbackeq5.5.6.0
tivoli_storage_manager_fastbackeq5.5.1
tivoli_storage_manager_fastbackeq5.5.2.0

Name	Operator	Version
tivoli_storage_manager_fastback	eq	6.1.0.0
tivoli_storage_manager_fastback	eq	6.1.0.1
tivoli_storage_manager_fastback	eq	5.5.3.0
tivoli_storage_manager_fastback	eq	5.5.0
tivoli_storage_manager_fastback	eq	5.5.4.0
tivoli_storage_manager_fastback	eq	5.5.5.0
tivoli_storage_manager_fastback	eq	5.5.2
tivoli_storage_manager_fastback	eq	5.5.6.0
tivoli_storage_manager_fastback	eq	5.5.1
tivoli_storage_manager_fastback	eq	5.5.2.0