Security Bulletin: IBM Tivoli Storage Manager FastBack Server Opcode 1329 Information Disclosure Vulnerability (CVE-2015-1941)

Summary An attacker can force IBM Tivoli Storage Manager FastBack Server to read an arbitrary file and return the contents under the privilege of SYSTEM. Vulnerability Details CVEID: CVE-2015-1941 DESCRIPTION: IBM Tivoli Storage Manager FastBack could allow a remote attacker to read any file on t...

Security Bulletin: Multiple Security Vulnerabilities in IBM Tivoli Storage Manager FastBack

Summary IBM Tivoli Storage Manager FastBack is affected by multiple security vulnerabilities such as stack based buffer overflow, command injection and remote code execution. These vulnerabilities may cause the server to crash, elevate privileges, or disclose information. Vulnerability Details...

IBM Tivoli Storage Manager FastBack Server Opcode 1329 Directory Traversal (CVE-2015-1941)

A directory traversal vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient input validation of parameters in opcode 1329 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port...

CVE-2015-1941

CVE-2015-1941 affects IBM Tivoli Storage Manager FastBack Server. A remote attacker can read arbitrary files by sending a crafted packet to a TCP port (reported as 11460); impact is read access under SYSTEM privileges. Affected products/versions: FastBack Server 6.1.11.1 and earlier (6.1.0.0–6.1....