critical10.0
CVE-2008-4563
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7…
Impact
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Tivoli Storage Manager | Versions 5.2, 5.3, 5.3.0, 5.3.1, 5.3.2, 5.3.2.4 |
| Ibm | Tivoli Storage Manager Express | Versions 5.3, 5.3.3.0, 5.3.6.4, 5.3.7.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775
- http://osvdb.org/52617
- http://secunia.com/advisories/34245
- http://securitytracker.com/id?1021837
- http://www-01.ibm.com/support/docview.wss?uid=swg21377388
- http://www.securityfocus.com/bid/34077
- http://www.vupen.com/english/advisories/2009/0669
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49188
- http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775
- http://osvdb.org/52617
- http://secunia.com/advisories/34245
- http://securitytracker.com/id?1021837
- http://www-01.ibm.com/support/docview.wss?uid=swg21377388
- http://www.securityfocus.com/bid/34077
- http://www.vupen.com/english/advisories/2009/0669
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49188