Security Bulletin: Buffer Overflow from improperly formatted SELECT command in IBM Tivoli Storage Manager (IBM Spectrum Protect) Server (CVE-2016-8998)

Summary An improperly formatted SELECT command to an IBM Tivoli Storage Manager IBM Spectrum Protect Server can cause a buffer overflow that could allow an attacker to execute arbitrary code on the server. Vulnerability Details CVEID: CVE-2016-8998 DESCRIPTION: IBM Tivoli Storage Manager Server...

CVE-2016-8998

IBM Tivoli Storage Manager Server 7.1 could allow an authenticated user with TSM administrator privileges to cause a buffer overflow using a specially crafted SQL query and execute arbitrary code on the server. IBM Reference : 1998747...

CVE-2016-8998

The CVE-2016-8998 issue affects IBM Tivoli Storage Manager Server (IBM Spectrum Protect) 7.1.x (7.1.1.0–7.1.7.0). A buffer overflow can be triggered by an improperly formatted SQL SELECT command, exploitable by an authenticated TSM administrator to execute arbitrary code on the server. IBM attrib...