critical9.0Public exploit code
CVE-2011-1220
Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- IBM Tivoli Endpoint Manager - POST Query Buffer Overflow (Metasploit)2011-06-12 · remote · windows · Verified
Impact
Stack-based buffer overflow in lcfd.exe in Tivoli Endpoint in IBM Tivoli Management Framework 3.7.1, 4.1, 4.1.1, and 4.3.1 allows remote authenticated users to execute arbitrary code via a long opts field.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Tivoli Management Framework | Versions 3.7.1, 4.1, 4.1.1, 4.3.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/44628
- http://securityreason.com/securityalert/8268
- http://securitytracker.com/id?1025581
- http://www-01.ibm.com/support/docview.wss?uid=swg21499146
- http://www.ibm.com/support/docview.wss?uid=swg1IZ90238
- http://www.securityfocus.com/archive/1/518199/100/0/threaded
- http://zerodayinitiative.com/advisories/ZDI-11-169/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67631
- http://secunia.com/advisories/44628
- http://securityreason.com/securityalert/8268
- http://securitytracker.com/id?1025581
- http://www-01.ibm.com/support/docview.wss?uid=swg21499146
- http://www.ibm.com/support/docview.wss?uid=swg1IZ90238
- http://www.securityfocus.com/archive/1/518199/100/0/threaded
- http://zerodayinitiative.com/advisories/ZDI-11-169/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67631