Security Bulletin: IBM Tivoli Storage Manager FastBack Demo package on the Web Potential DLL Loading Code Execution Vulnerability (CVE-2016-5934 )

Summary IBM Tivoli Storage Manager FastBack Demo package on the Web contains a DLL hijacking vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. Vulnerability Details CVEID: CVE-2016-5934 DESCRIPTION: IBM Tivoli Storage Manager...

CVE-2016-5934

CVE-2016-5934 = IBM Tivoli Storage Manager FastBack installer DLL hijacking vulnerability. A specially-crafted DLL placed in the victim’s path could be loaded when the installer runs, allowing an unauthenticated attacker with local access to execute arbitrary code with the victim’s privileges. CV...