Vulnerability CVE-2010-3756
Published: 2010-10-05   Modified: 2012-02-13

Description:
The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service (daemon crash) by sending data over TCP. NOTE: this might overlap CVE-2010-3060.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
IBM TSM FastBack _CalcHashValueWithLength Remote Denial of Service Vulnerability
ZDI
07.10.2010

Type:

CWE-20

 (Improper Input Validation)

CVSS2 => (AV:N/AC:L/Au:N/C:N/I:N/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
5/10
2.9/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
None
None
Partial
Affected software
IBM -> Tivoli storage manager fastback 

 References:
http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
http://www.ibm.com/support/docview.wss?uid=swg21443820
http://www.securityfocus.com/archive/1/514070/100/0/threaded
http://zerodayinitiative.com/advisories/ZDI-10-186/
Copyright 2024, cxsecurity.com

 

Back to Top