CVE-2010-3759: Improper Control of Generation of Code

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 writes a certain value to a memory location specified by a UDP packet field, which allows remote attackers to execute arbitrary code via multiple requests. NOTE:...

CVE-2010-3756: Improper Input Validation

The CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service daemon crash b...

CVE-2010-3755: Undefined Security Weakness

The DASReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via data in a TCP packet. NOTE: this mig...

CVE-2010-3761: Improper Control of Generation of Code

Unspecified vulnerability in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-700. NOTE: this might overlap CVE-2010-3058 or CVE-2010-3059...

CVE-2010-3760: Undefined Security Weakness

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash...

PT-2010-5049

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM FastBack versions 5.5.0.0 through 5.5.6.0 IBM Tivoli Storage Manager TSM FastBack versions 6.1.0.0 through 6.1.0.1 Description The issue arises from improper handling of memory allocation failure by...

PT-2010-5050

Unspecified vulnerability in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-700. NOTE: this might overlap CVE-2010-3058 or CVE-2010-3059...

PT-2010-5047

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM FastBack versions 5.5.0.0 through 5.5.6.0 IBM Tivoli Storage Manager TSM FastBack versions 6.1.0.0 through 6.1.0.1 Description The issue involves multiple stack-based buffer overflows in FastBackServer.exe,...

IBM Tivoli Storage Manager FastBack Mount NULL Pointer Dereference DoS Vulnerability

This vulnerability allows remote attackers to deny service to clients on vulnerable installations of IBM Tivoli FastBack Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FastBackMount.exe component which listens by default on TCP...

IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Fastback. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Mount service FastBackMount.exe. This process listens by defau...

IBM TSM FastBack Server _Eventlog Format String Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Fastback. Authentication is not required to exploit this vulnerability. The specific flaw exists within the FastBack server process FastBackServer.exe which listens by...

CVE-2010-3060

Unspecified vulnerability in the message-protocol implementation in the Server in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service daemon outage via unknown vectors...

CVE-2010-3058

The Mount service in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service application hang, via unspecified vectors...

CVE-2010-3061

Unspecified vulnerability in the message-protocol implementation in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service recovery failure, and possibly trigger loss of data, via unknown vectors...

Buffer overflow

Buffer overflow in the message-protocol implementation in the Server in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to read and modify data, and possibly have other impact, via an unspecified command...

Code injection

The Mount service in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service application hang, via unspecified vectors...

Design/Logic Flaw

Unspecified vulnerability in the message-protocol implementation in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service recovery failure, and possibly trigger loss of data, via unknown vectors...

CVE-2010-3058

The Mount service in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service application hang, via unspecified vectors...

CVE-2010-3059

Buffer overflow in the message-protocol implementation in the Server in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to read and modify data, and possibly have other impact, via an unspecified command...

CVE-2010-3060

Unspecified vulnerability in the message-protocol implementation in the Server in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service daemon outage via unknown vectors...