CVE

Id
46338  
CVE No.
CVE-2010-3754  
Status
Candidate  
Description
The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields to determine the content and length of data copied to memory, which allows remote attackers to execute arbitrary code via a crafted packet. NOTE: this might overlap CVE-2010-3059.  
Phase
Assigned (20101005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
505197 46338 CVE-2010-3754 BUGTRAQ:20100929 ZDI-10-182: IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities  View
505198 46338 CVE-2010-3754 URL:http://www.securityfocus.com/archive/1/archive/1/514058/100/0/threaded  View
505199 46338 CVE-2010-3754 MISC:http://zerodayinitiative.com/advisories/ZDI-10-182/  View
505200 46338 CVE-2010-3754 CONFIRM:http://www.ibm.com/support/docview.wss?uid=swg21443820  View
505201 46338 CVE-2010-3754 AIXAPAR:IC69883  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
37446 JVNDB-2010-003231 IBM TSM FastBack の FastBackServer.exe におけるスタックベースのバッファオーバーフローの脆弱性 IBM Tivoli Storage Manager (TSM) FastBack の Server の FastBackServer.exe には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-3758 46338 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003231.html  View