CVE-2015-1923

CVE-2015-1923 affects IBM Tivoli Storage Manager FastBack Server (6.1.0.0–6.1.11.1). The vulnerability is a buffer overflow in the server, exploitable remotely via unspecified vectors, leading to a denial of service (daemon crash). ING: multiple sources document this flaw as a stack-based/heap bu...

CVE-2015-1924

CVE-2015-1924 affects IBM Tivoli Storage Manager FastBack 6.1 (server component) prior to 6.1.12, due to a stack-based buffer overflow in the server that enables remote denial-of-service (daemon crash) via unspecified vectors. Impact is DoS of the FastBack daemon; no exploitable details or campai...

CVE-2015-1954

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2015-1963

Technical details for CVE-2015-1963 are not publicly provided in the supplied documents. Monitor for updates.

CVE-2015-1965

Technical details for CVE-2015-1965 are not publicly available in the provided documents. Monitor for updates from vendor advisories and security bulletins.

CVE-2015-1941

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to read arbitrary files via a crafted TCP packet to an unspecified port...

CVE-2015-1930

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service daemon crash via unspecified vectors, a different vulnerability than CVE-2015-1924, CVE-2015-1925, CVE-2015-1929, CVE-2015-1948, CVE-2015-1953,...

CVE-2015-1938

IBM Tivoli Storage Manager FastBack Server 6.1.x is affected by CVE-2015-1938 (and related CVEs). The issue is a command-injection vulnerability caused by insufficient input validation of Opcode 1331 requests, allowing a remote unauthenticated attacker to inject and execute commands on the server...

CVE-2015-1953

Technical details for CVE-2015-1953 are not publicly provided in the supplied documents; monitor for updates.

CVE-2015-1964

CVE-2015-1964 affects IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12. The server component is vulnerable to a stack-based buffer overflow, enabling remote attackers to cause a denial-of-service (daemon crash) via unspecified vectors. The description explicitly states the impact is a DoS on...

CVE-2015-1938

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2015-1986...

IBM Tivoli Storage Manager FastBack Server JOB_S_GetJobByUserFriendlyString Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the JOBSGetJobByUserFriendlyString function. By sending a crafted...

IBM Tivoli Storage Manager FastBack Server Opcode 1331 lza32 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of opcode 1331. By sending a crafted packet on TCP port...

IBM Tivoli Storage Manager FastBack Server Opcode 1329 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1329. By sending a crafted packet on TCP port...

IBM Tivoli Storage Manager FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FXCLIOraBRExecCommand function. By sending a crafted packet on...

IBM Tivoli Storage Manager FastBack Server Opcode 1301 Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1301. By sending a crafted packet on TCP...

IBM Tivoli Storage Manager FastBack Server Opcode 1332 Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1332. By sending a crafted packet on TCP...

IBM Tivoli Storage Manager FastBack Server Opcode 1331 Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1331. By sending a crafted packet on TCP...

IBM Tivoli Storage Manager FastBack Server Opcode 1364 Stack Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1364. By sending a crafted packet on TCP...

IBM Tivoli Storage Manager FastBack Server Opcode 1329 Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of IBM Tivoli Storage Manager FastBack. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of opcode 1329. By sending a crafted packet...