Security Bulletin: Multiple Security Vulnerabilities in IBM Tivoli Storage Manager FastBack

Summary IBM Tivoli Storage Manager FastBack is affected by multiple security vulnerabilities such as stack based buffer overflow, command injection and remote code execution. These vulnerabilities may cause the server to crash, elevate privileges, or disclose information. Vulnerability Details...

IBM Tivoli Storage Manager FastBack Server Opcode 1329 Buffer Overflow (CVE-2015-1924)

A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient boundary checking on parameters in opcode 1329 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP...

CVE-2015-1924

CVE-2015-1924 affects IBM Tivoli Storage Manager FastBack 6.1 (server component) prior to 6.1.12, due to a stack-based buffer overflow in the server that enables remote denial-of-service (daemon crash) via unspecified vectors. Impact is DoS of the FastBack daemon; no exploitable details or campai...