Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified "generic string handling function" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI.
References
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 00:52
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://osvdb.org/54231 - | |
| References | () http://osvdb.org/54232 - | |
| References | () http://secunia.com/advisories/32604 - | |
| References | () http://secunia.com/secunia_research/2008-55/ - Vendor Advisory | |
| References | () http://www-01.ibm.com/support/docview.wss?uid=swg21384389 - Patch, Vendor Advisory | |
| References | () http://www-1.ibm.com/support/docview.wss?uid=swg1IC59513 - Patch, Vendor Advisory | |
| References | () http://www.securityfocus.com/archive/1/503182/100/0/threaded - | |
| References | () http://www.vupen.com/english/advisories/2009/1235 - | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/50327 - |
Information
Published : 2009-05-05 17:30
Updated : 2024-11-21 00:52
NVD link : CVE-2008-4828
Mitre link : CVE-2008-4828
CVE.ORG link : CVE-2008-4828
JSON object : View
Products Affected
ibm
- tivoli_storage_manager_client
- tivoli_storage_manager_express
CWE
CWE-119
Improper Restriction of Operations within the Bounds of a Memory Buffer