Security Bulletin: IBM Tivoli Storage Manager FastBack Stack-Based Buffer Overflow Elevation of Privilege Vulnerability (CVE-2015-1898)

Summary The IBM Tivoli Storage Manager FastBack mount process is vulnerable to a stack-based buffer overflow. A local or network attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the server to crash. Vulnerability Details CVEID: CVE-2015-1898...

IBM Tivoli Storage Manager FastBack Mount 6.1.x < 6.1.11.1 Multiple Vulnerabilities

The version of IBM Tivoli Storage Manager FastBack running on the remote host is 6.1.x prior to 6.1.11.1. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the mount service due to improper validation of user-supplied input to the CRYPTOSEncryptBufferToBuffer function. A...

Stack overflow

Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows local users to gain privileges via unspecified vectors, a different vulnerability than CVE-2015-1898...

CVE-2015-1898

CVE-2015-1898 affects IBM Tivoli Storage Manager FastBack Mount, with a stack-based buffer overflow in the FastBackMount process. Affected: 6.1.x up to 6.1.11 (and earlier). Impact: arbitrary code execution with SYSTEM/root privileges or server crash; attack can be local or over the network. Miti...