Lucene search

K
cveMitreCVE-2010-3757
HistoryOct 05, 2010 - 10:00 p.m.

CVE-2010-3757

2010-10-0522:00:06
CWE-78
mitre
web.nvd.nist.gov
46
cve-2010-3757
format string vulnerability
fastbackserver.exe
ibm tivoli storage manager
tsm
remote code execution
cve-2010-3059

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.016

Percentile

87.8%

Format string vulnerability in the _Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via format string specifiers located after a | (pipe) character in a string. NOTE: this might overlap CVE-2010-3059.

Affected configurations

Nvd
Node
ibmtivoli_storage_manager_fastbackMatch5.5.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.1
OR
ibmtivoli_storage_manager_fastbackMatch5.5.2
OR
ibmtivoli_storage_manager_fastbackMatch5.5.2.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.3.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.4.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.5.0
OR
ibmtivoli_storage_manager_fastbackMatch5.5.6.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.0.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.0.1
VendorProductVersionCPE
ibmtivoli_storage_manager_fastback5.5.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:5.5.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback5.5.1cpe:2.3:a:ibm:tivoli_storage_manager_fastback:5.5.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback5.5.2cpe:2.3:a:ibm:tivoli_storage_manager_fastback:5.5.2:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback5.5.2.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:5.5.2.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback5.5.3.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:5.5.3.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback5.5.4.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:5.5.4.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback5.5.5.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:5.5.5.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback5.5.6.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:5.5.6.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.0.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.0.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.0.1cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.0.1:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.4

Confidence

Low

EPSS

0.016

Percentile

87.8%

Related for CVE-2010-3757