IBM Tivoli Storage Manager FastBack Server Opcode 1330 Command Injection (CVE-2015-1949)

A command injection vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient input validation of parameters in opcode 1330 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP...

CVE-2015-1949

CVE-2015-1949 affects IBM Tivoli Storage Manager FastBack Server 6.1.x prior to 6.1.12. The root issue is a command-injection/remote-code-execution vulnerability in opcode handling, allowing a remote, unauthenticated attacker to send crafted requests (e.g., to port 11460) and execute arbitrary co...