CVSS: 10.0EPSS: 96%CPEs: 8EXPL: 2CVE-2007-4880 – IBM Tivoli Storage Manager Express CAD Service Buffer Overflow Vulnerability
https://notcve.org/view.php?id=CVE-2007-4880
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905. Desbordamiento de búfer en el Demonio Aceptador de Clientes (Client Acceptor Daemon o CAD), dsmcad.exe, en determinados clientes IBM Tivoli Storage Manager (TSM) 5.1 anterior a 5.1.8.1, 5.2 anterior a 5.2.5.2, 5.3 anterior a 5.3.5.3, y 5.4 anterior a 5.4.1.2 permite a atacantes remotos ejecutar código de su elección mediante cabeceras HTTP manipuladas, también conocida como IC52905. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Express. Authentication is not required to exploit this vulnerability. The specific flaw exists in the dsmcad.exe process bound by default on TCP port 1581. During HTTP header parsing, a host parameter of sufficient length will trigger an overflow through a call to vswprintf(). • https://www.exploit-db.com/exploits/16764 https://www.exploit-db.com/exploits/4573 http://osvdb.org/38161 http://secunia.com/advisories/26883 http://securityreason.com/securityalert/3184 http://www-1.ibm.com/support/docview.wss?uid=swg21268775 http://www-1.ibm.com/support/search.wss?rs=0&q=IC52905&apar=only http://www.securityfocus.com/archive/1/480492 http://www.securityfocus.com/bid/25743 http://www.securitytracker.com/id?1018725 http://www.vupen.com/english/ • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 3%CPEs: 4EXPL: 0CVE-2007-5022
https://notcve.org/view.php?id=CVE-2007-5022
Unspecified vulnerability in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2, when using "server-initiated prompted scheduling," allows remote attackers to read a client's data, aka IC53616. Vulnerabilidad no especificada en determinados clientes IBM Tivoli Storage Manager (TSM) 5.1 versiones anteriores a 5.1.8.1, 5.2 versiones anteriores a 5.2.5.2, 5.3 versiones anteriores a 5.3.5.3, y 5.4 versiones anteriores a 5.4.1.2, cuando se utiliza "programación de tareas solicitado en tiempo de iniciación de servidor", permite a atacantes remotos leer datos del cliente, también conocido como IC53616. • http://osvdb.org/38162 http://secunia.com/advisories/26883 http://www-1.ibm.com/support/docview.wss?uid=swg21268775 http://www-1.ibm.com/support/search.wss?rs=0&q=IC53616&apar=only http://www.securityfocus.com/bid/25743 http://www.securitytracker.com/id?1018725 http://www.vupen.com/english/advisories/2007/3228 https://exchange.xforce.ibmcloud.com/vulnerabilities/36701 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •