Tivoli Provisioning Manager for OS Deployment is a product which facilitates remote operating system installation and management.
A buffer overflow vulnerability in the HTTP server which comes with Tivoli Provisioning Manager for OS Deployment allows remote attackers to execute arbitrary commands by sending a request for a long, specially crafted URL.
Apply Interim Fix 3, Version 184.108.40.206.
Exploit works on Tivoli Provisioning Manager for OS Deployment 220.127.116.11.
Exploit requires the IO-Socket-SSL PERL module to be installed on the scanning host. This module is available from <http://www.cpan.org/modules/by-module/IO/>.
Windows Server 2003