CVE-2010-3754

Technical details about CVE-2010-3754 are not present in the provided connected documents. No specifics on affected components, root cause, or remediation are provided here; monitor for updates.

CVE-2010-3760

IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1 have a memory allocation failure in the Mount service (FastBackMount.exe) that can be triggered by a large TCP packet size, causing a NULL pointer dereference and a daemon crash with recovery failure (remote DoS). This ...

CVE-2010-3761

Unspecified vulnerability in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-700. NOTE: this might overlap CVE-2010-3058 or CVE-2010-3059...

CVE-2010-3759

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE:...

CVE-2010-3755

The DASReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via data in a TCP packet. NOTE: this mig...

CVE-2010-3760

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash...

CVE-2010-3758

Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the 1 AGISendToLog aka SendToLog function; the 2 group, 3...

CVE-2010-3759

CVE-2010-3759 affects IBM Tivoli Storage Manager FastBack Mount (FastBackMount.exe) in the Mount service. Versions affected: FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1. Issue: memory corruption caused by parsing crafted UDP requests to the mount service, enabling remote code execution. Public e...

CVE-2010-3761

IBM Tivoli Storage Manager FastBack Mount service (FastBackMount.exe) on Windows is affected by a memory corruption vulnerability in the UDP-based mount handling, allowing remote code execution. Affects FastBack 5.x (before 5.5.7) and 6.1.0.0–6.1.0.1; exploitation vectors are via crafted mount re...

CVE-2010-3756

The CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service daemon crash b...

CVE-2010-3754

The FXCLIOraBRExecCommand function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields to determine the content and length of data copied to memory, which allows remote attackers to execute...

CVE-2010-3757

Format string vulnerability in the Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via format string specifiers located after a | pipe character i...

ZDI-10-181: IBM TSM FastBack Server ActivateLTScriptReply Remote Code Execution Vulnerability

ZDI-10-181: IBM TSM FastBack Server ActivateLTScriptReply Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-181 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack --...

ZDI-10-184: IBM TSM FastBack Server USER_S_AddADGroup Remote Code Execution Vulnerability

ZDI-10-184: IBM TSM FastBack Server USERSAddADGroup Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-184 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack --...

ZDI-10-187: IBM TSM FastBack Server _DAS_ReadBlockReply Remote Denial of Service Vulnerability

ZDI-10-187: IBM TSM FastBack Server DASReadBlockReply Remote Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-187 September 29, 2010 -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack -- TippingPointTM IPS Customer Protection:...

ZDI-10-186: IBM TSM FastBack _CalcHashValueWithLength Remote Denial of Service Vulnerability

ZDI-10-186: IBM TSM FastBack CalcHashValueWithLength Remote Denial of Service Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-186 September 29, 2010 -- CVSS: 5, AV:N/AC:L/Au:N/C:N/I:N/A:P -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack --...

ZDI-10-185: IBM TSM FastBack Server _Eventlog Format String Remote Code Execution Vulnerability

ZDI-10-185: IBM TSM FastBack Server Eventlog Format String Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-185 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager --...

ZDI-10-183: IBM TSM FastBack Server FXCLI_checkIndexDBLocation Remote Code Execution Vulnerability

ZDI-10-183: IBM TSM FastBack Server FXCLIcheckIndexDBLocation Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-183 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack --...

IBM TSM FastBack multiple security vulnerabilities

Multiple code execution and denial of service conditions...

ZDI-10-180: IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerability

ZDI-10-180: IBM TSM FastBack Server SendToLog Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-180 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack -- TippingPointTM...