IBM Tivoli Storage Manager FastBack Server Opcode 1329 Directory Traversal (CVE-2015-1941)

A directory traversal vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient input validation of parameters in opcode 1329 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port...

IBM Tivoli Storage Manager FastBack Server Opcode 1330 Command Injection (CVE-2015-1949)

A command injection vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient input validation of parameters in opcode 1330 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP...

IBM Tivoli Storage Manager FastBack Server FXCLI_OraBR_Exec_Command Buffer Overflow (CVE-2015-1929)

A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient boundary checking while processing remote requests within the FXCLIOraBRExecCommand function. A remote unauthenticated attacker could exploit this vulnerability by sendin...

IBM Tivoli Storage Manager FastBack Server Opcode 1331 lza32 Command Injection (CVE-2015-1938)

A command injection vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient input validation of parameters in opcode 1331 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP...

IBM Tivoli Storage Manager FastBack Server Opcode 1332 Buffer Overflow (CVE-2015-1925)

A buffer overflow vulnerability exists in IBM Tivoli Storage Manager FastBack Server. The vulnerability is due to insufficient boundary checking on parameters in opcode 1332 requests. A remote unauthenticated attacker could exploit this vulnerability by sending crafted requests to port 11460/TCP...

CVE-2015-4950: Exposure of Sensitive Information to an Unauthorized Actor

The mailbox-restore feature in IBM Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 6.1 before 6.1.3.6, 6.3 before 6.3.1.3, 6.4 before 6.4.1.4, and 7.1 before 7.1.0.2; Tivoli Storage FlashCopy Manager: FlashCopy Manager for Microsoft Exchange Server 2.1, 2.2, 3.1...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to execute arbitrary code.

The vulnerability of the Tivoli Storage Manager FastBack data management program arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to execute arbitrary code.

The vulnerability of the Tivoli Storage Manager FastBack data management program arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to execute arbitrary code.

The vulnerability of the Tivoli Storage Manager FastBack data management program arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to execute arbitrary code.

The vulnerability of the Tivoli Storage Manager FastBack data management program arises due to buffer overflow in dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

The vulnerability of the Tivoli Storage Manager FastBack data management program allows a hacker to execute arbitrary code.

The vulnerability of the Tivoli Storage Manager FastBack data management program arises due to buffer overflow in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using a specially crafted package...

IBM Tivoli Storage Manager FastBack 6.1.x < 6.1.12.1 Multiple Vulnerabilities

The version of IBM Tivoli Storage Manager FastBack running on the remote host is 6.1.x prior to 6.1.12.1. It is, therefore, affected by multiple stack-based buffer overflow conditions that can be exploited by a remote attacker, using specially crafted packets, to cause a denial of service or...

CVE-2015-4931

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability than CVE-2015-4932, CVE-2015-4933, CVE-2015-4934, and CVE-2015-4935...

CVE-2015-4935

Affected software: IBM Tivoli Storage Manager FastBack 6.1.x (6.1.0.0–6.1.12.0). Vulnerability: Stack-based buffer overflow in the FastBack server when processing crafted packets, enabling remote code execution with SYSTEM privileges or server crash. Root cause: Improper bounds checking in the se...

CVE-2015-4933

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability than CVE-2015-4931, CVE-2015-4932, CVE-2015-4934, and CVE-2015-4935...

CVE-2015-4932

The IBM Tivoli Storage Manager FastBack server is affected by multiple stack-based buffer overflow vulnerabilities (CVE-2015-4931 to CVE-2015-4935) in FastBack 6.1.x before 6.1.12.1. An attacker can remotely overflow buffers by sending crafted packets, potentially executing code with SYSTEM privi...

CVE-2015-4933

IBM Tivoli Storage Manager FastBack server is vulnerable to a stack-based buffer overflow (CVE-2015-4933) due to improper bounds checking. A remote attacker can exploit a crafted packet to execute arbitrary code with SYSTEM privileges on FastBack 6.1.x before 6.1.12.1. Affected: 6.1.0.0–6.1.12.0....

CVE-2015-4934

CVE-2015-4934 is a stack-based buffer overflow in the IBM Tivoli Storage Manager FastBack Server. The IBM Security Bulletin and NVD entry confirm the vulnerability lies in the server’s handling of crafted packets, allowing a remote attacker to execute arbitrary code—potentially with SYSTEM privil...

CVE-2015-4935: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability than CVE-2015-4931, CVE-2015-4932, CVE-2015-4933, and CVE-2015-4934...

CVE-2015-4933: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability than CVE-2015-4931, CVE-2015-4932, CVE-2015-4934, and CVE-2015-4935...