Lucene search

K
cveMitreCVE-2008-4563
HistoryMar 11, 2009 - 2:19 p.m.

CVE-2008-4563

2009-03-1114:19:15
CWE-119
mitre
web.nvd.nist.gov
34
ibm
tivoli
storage manager
tsm
express
buffer overflow
heap-based
vulnerability
nvd
cve-2008-4563

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.828

Percentile

98.4%

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.

Affected configurations

Nvd
Node
microsoftwindows
AND
ibmtivoli_storage_managerMatch5.2
OR
ibmtivoli_storage_managerMatch5.3
OR
ibmtivoli_storage_managerMatch5.3.0
OR
ibmtivoli_storage_managerMatch5.3.1
OR
ibmtivoli_storage_managerMatch5.3.2
OR
ibmtivoli_storage_managerMatch5.3.2.4
OR
ibmtivoli_storage_managerMatch5.3.3
OR
ibmtivoli_storage_managerMatch5.3.4
OR
ibmtivoli_storage_managerMatch5.3.5.1
OR
ibmtivoli_storage_managerMatch5.4.0
OR
ibmtivoli_storage_managerMatch5.4.1
OR
ibmtivoli_storage_managerMatch5.4.2
OR
ibmtivoli_storage_managerMatch5.4.2.2
OR
ibmtivoli_storage_managerMatch5.4.2.3
OR
ibmtivoli_storage_managerMatch5.4.2.4
OR
ibmtivoli_storage_managerMatch5.4.4.0
OR
ibmtivoli_storage_manager_expressMatch5.3
OR
ibmtivoli_storage_manager_expressMatch5.3.3.0
OR
ibmtivoli_storage_manager_expressMatch5.3.6.4
OR
ibmtivoli_storage_manager_expressMatch5.3.7.3
VendorProductVersionCPE
microsoftwindows*cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.2cpe:2.3:a:ibm:tivoli_storage_manager:5.2:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.3cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.3.0cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.3.1cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.3.2cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.3.2.4cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.3.3cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.3.4cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*
ibmtivoli_storage_manager5.3.5.1cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 211

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.9

Confidence

Low

EPSS

0.828

Percentile

98.4%