Security Bulletin: IBM Tivoli Storage Manager FastBack Server Opcode 1332 Directory Traversal Remote Code Execution Vulnerability (CVE-2015-1942)

Summary An attacker can force IBM Tivoli Storage Manager FastBack Server to write arbitrary data to an arbitrary file under the privilege of SYSTEM. Vulnerability Details CVEID: CVE-2015-1942 DESCRIPTION: IBM Tivoli Storage Manager FastBack could allow a remote attacker to write and execute a fil...

Security Bulletin: Multiple Security Vulnerabilities in IBM Tivoli Storage Manager FastBack

Summary IBM Tivoli Storage Manager FastBack is affected by multiple security vulnerabilities such as stack based buffer overflow, command injection and remote code execution. These vulnerabilities may cause the server to crash, elevate privileges, or disclose information. Vulnerability Details...

CVE-2015-1942

The CVE-2015-1942 entry concerns IBM Tivoli Storage Manager FastBack Server. Multiple sources (IBM Security Bulletin, NVD/NIST, and Nessus/OpenVAS listings) confirm that FastBack Server versions up to 6.1.11.1 are affected when handling crafted TCP traffic. The root issue is a remote code executi...