CVSS: 10.0EPSS: 82%CPEs: 21EXPL: 0CVE-2008-4563
https://notcve.org/view.php?id=CVE-2008-4563
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value. Un desbordamiento del búfer en la región heap de la memoria en la biblioteca adsmdll.dll versión 5.3.7.7296, como es usada por el demonio (dsmsvc.exe) en el servidor de respaldo en Tivoli Storage Manager (TSM) Express de IBM versión 5.3.7.3 y anteriores y TSM versión 5.2, versiones 5.3 anteriores a 5.3.6.0 , y versiones 5.4.0.0 hasta 5.4.4.0, permite a los atacantes remotos ejecutar código arbitrario por medio de un valor de longitud diseñado. • http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775 http://osvdb.org/52617 http://secunia.com/advisories/34245 http://securitytracker.com/id?1021837 http://www-01.ibm.com/support/docview.wss?uid=swg21377388 http://www.securityfocus.com/bid/34077 http://www.vupen.com/english/advisories/2009/0669 https://exchange.xforce.ibmcloud.com/vulnerabilities/49188 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 96%CPEs: 8EXPL: 2CVE-2007-4880 – IBM Tivoli Storage Manager Express CAD Service Buffer Overflow Vulnerability
https://notcve.org/view.php?id=CVE-2007-4880
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905. Desbordamiento de búfer en el Demonio Aceptador de Clientes (Client Acceptor Daemon o CAD), dsmcad.exe, en determinados clientes IBM Tivoli Storage Manager (TSM) 5.1 anterior a 5.1.8.1, 5.2 anterior a 5.2.5.2, 5.3 anterior a 5.3.5.3, y 5.4 anterior a 5.4.1.2 permite a atacantes remotos ejecutar código de su elección mediante cabeceras HTTP manipuladas, también conocida como IC52905. This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Express. Authentication is not required to exploit this vulnerability. The specific flaw exists in the dsmcad.exe process bound by default on TCP port 1581. During HTTP header parsing, a host parameter of sufficient length will trigger an overflow through a call to vswprintf(). • https://www.exploit-db.com/exploits/16764 https://www.exploit-db.com/exploits/4573 http://osvdb.org/38161 http://secunia.com/advisories/26883 http://securityreason.com/securityalert/3184 http://www-1.ibm.com/support/docview.wss?uid=swg21268775 http://www-1.ibm.com/support/search.wss?rs=0&q=IC52905&apar=only http://www.securityfocus.com/archive/1/480492 http://www.securityfocus.com/bid/25743 http://www.securitytracker.com/id?1018725 http://www.vupen.com/english/ • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •