Lucene search

K
cveIbmCVE-2015-8519
HistoryApr 05, 2016 - 5:59 p.m.

CVE-2015-8519

2016-04-0517:59:00
CWE-119
ibm
web.nvd.nist.gov
32
cve-2015-8519
buffer overflow
ibm tivoli storage manager
fastback
remote code execution

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.867

Percentile

98.6%

Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8520, CVE-2015-8521, and CVE-2015-8522.

Affected configurations

Nvd
Node
ibmtivoli_storage_manager_fastbackMatch5.5.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.0.1
OR
ibmtivoli_storage_manager_fastbackMatch6.1.1
OR
ibmtivoli_storage_manager_fastbackMatch6.1.1.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.2
OR
ibmtivoli_storage_manager_fastbackMatch6.1.2.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.3
OR
ibmtivoli_storage_manager_fastbackMatch6.1.3.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.4
OR
ibmtivoli_storage_manager_fastbackMatch6.1.4.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.5
OR
ibmtivoli_storage_manager_fastbackMatch6.1.5.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.5.2
OR
ibmtivoli_storage_manager_fastbackMatch6.1.6
OR
ibmtivoli_storage_manager_fastbackMatch6.1.6.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.6.1
OR
ibmtivoli_storage_manager_fastbackMatch6.1.6.2
OR
ibmtivoli_storage_manager_fastbackMatch6.1.7
OR
ibmtivoli_storage_manager_fastbackMatch6.1.7.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.7.1
OR
ibmtivoli_storage_manager_fastbackMatch6.1.7.2
OR
ibmtivoli_storage_manager_fastbackMatch6.1.8
OR
ibmtivoli_storage_manager_fastbackMatch6.1.8.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.9
OR
ibmtivoli_storage_manager_fastbackMatch6.1.9.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.9.1
OR
ibmtivoli_storage_manager_fastbackMatch6.1.10
OR
ibmtivoli_storage_manager_fastbackMatch6.1.10.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.10.1
OR
ibmtivoli_storage_manager_fastbackMatch6.1.11
OR
ibmtivoli_storage_manager_fastbackMatch6.1.11.0
OR
ibmtivoli_storage_manager_fastbackMatch6.1.11.1
OR
ibmtivoli_storage_manager_fastbackMatch6.1.12
OR
ibmtivoli_storage_manager_fastbackMatch6.1.12.1
VendorProductVersionCPE
ibmtivoli_storage_manager_fastback5.5.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:5.5.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.0.1cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.0.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.1cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.1:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.1.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.1.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.2cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.2:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.2.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.2.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.3cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.3:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.3.0cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.3.0:*:*:*:*:*:*:*
ibmtivoli_storage_manager_fastback6.1.4cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.4:*:*:*:*:*:*:*
Rows per page:
1-10 of 351

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.5

Confidence

High

EPSS

0.867

Percentile

98.6%