CVE-2015-8522.RCE

CVE-2015-8522 Tivoli FastBack Server 6.1.4 应用程序存在基于栈的缓冲区溢出漏洞，威胁行为者可通过远程 TCP 连接实现任意代码执行 ACE。本仓库提供的 PoC 利用此漏洞在目标上执行 CMD.exe，并处理传入连接以建立反向 Shell。 !NOTE 此 PoC 基于先前发布的 PoC，并在此基础上增加了 ASLR 绕过，同时按照常见的软件工程范式改进了架构。由于推荐的多文件结构可能并非适用于所有场景，因此在 assets/single.py 中提供了单文件版本的漏洞利用代码。 漏洞 通信 PoC 通过 TCP 端口 11460...

CVE-2015-1925.RCE

CVE-2015-1925 The exploit targets Tivoli Fastback Server running on Windows 10 x86, build: 16299 , affecting version 6.1.4 , where an unauthenticated attacker can perform a buffer overflow through a raw socket connection , resulting in remote code execution RCE. This exploit assumes ASLR is not...

Exploit for Improper Restriction of Operations within the Bounds of a Memory Buffer in Ibm Tivoli_Storage_Manager_Fastback

No d...

EUVD-2010-3060

Malware in sbrugna...

EUVD-2015-2068

Malware in sbrugna...

EUVD-2010-3734

Malware in sbrugna...

EUVD-2010-3739

Malware in sbrugna...

EUVD-2015-0157

Malware in sbrugna...

EUVD-2015-2067

Malware in sbrugna...

EUVD-2010-3738

Malware in sbrugna...

EUVD-2015-0158

Malware in sbrugna...

EUVD-2015-2003

Malware in sbrugna...

EUVD-2015-2058

Malware in sbrugna...

EUVD-2015-8400

Malware in sbrugna...

CVE-2010-3061

Unspecified vulnerability in the message-protocol implementation in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service recovery failure, and possibly trigger loss of data, via unknown vectors...

CVE-2010-3060

Unspecified vulnerability in the message-protocol implementation in the Server in IBM Tivoli Storage Manager TSM FastBack 5.x.x before 5.5.7, and 6.1.0.0, allows remote attackers to cause a denial of service daemon outage via unknown vectors...

IBM Tivoli Storage Manager FastBack Server Opcode 0x534 Denial of Service

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "IBM Tivoli Storage Manager FastBack Server Opcode 0x534 Denial of Service", 'Description' = %q This module exploits a denial of service condition...

Security Bulletin: IBM Tivoli Storage Manager FastBack Server Opcode 1364 Stack Buffer Overflow Remote Code Execution Vulnerability (CVE-2015-1948)

Summary The IBM Tivoli Storage Manager FastBack Server is vulnerable to a stack-based buffer overflow. An attacker could overflow a buffer and execute arbitrary code on the system or cause the server to crash. Vulnerability Details CVEID: CVE-2015-1948 DESCRIPTION: IBM Tivoli Storage Manager...

Security Bulletin: IBM Tivoli Storage Manager FastBack Server Stack-Based Buffer Overflow Vulnerability (CVE-2015-1962)

Summary The IBM Tivoli Storage Manager FastBack Server process is vulnerable to a stack-based buffer overflow. An attacker could overflow a buffer and cause the server to crash. Vulnerability Details CVEID: CVE-2015-1962 DESCRIPTION: IBM Tivoli Storage Manager FastBack Server is vulnerable to a...

Security Bulletin: Vulnerability in SSLv3 affects Tivoli Storage Manager FastBack (CVE-2014-3566)

Summary SSLv3 contains a vulnerability that has been referred to as the Padding Oracle On Downgraded Legacy Encryption POODLE attack. SSLv3 is enabled in Tivoli Storage Manager FastBack when the Disaster Recovery process uses FTP as the target type and encryption is enabled. Vulnerability Details...