CVE

Id
46342  
CVE No.
CVE-2010-3758  
Status
Candidate  
Description
Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka _SendToLog) function; the (2) group, (3) workgroup, or (4) domain name field to the USER_S_AddADGroup function; the (5) user_path variable to the FXCLI_checkIndexDBLocation function; or (6) the _AGI_S_ActivateLTScriptReply (aka ActivateLTScriptReply) function. NOTE: this might overlap CVE-2010-3059.  
Phase
Assigned (20101005)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
505217 46342 CVE-2010-3758 BUGTRAQ:20100929 ZDI-10-180: IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerability  View
505218 46342 CVE-2010-3758 URL:http://www.securityfocus.com/archive/1/archive/1/514072/100/0/threaded  View
505219 46342 CVE-2010-3758 BUGTRAQ:20100929 ZDI-10-181: IBM TSM FastBack Server ActivateLTScriptReply Remote Code Execution Vulnerability  View
505220 46342 CVE-2010-3758 URL:http://www.securityfocus.com/archive/1/archive/1/514078/100/0/threaded  View
505221 46342 CVE-2010-3758 BUGTRAQ:20100929 ZDI-10-183: IBM TSM FastBack Server FXCLI_checkIndexDBLocation Remote Code Execution Vulnerability  View
505222 46342 CVE-2010-3758 URL:http://www.securityfocus.com/archive/1/archive/1/514067/100/0/threaded  View
505223 46342 CVE-2010-3758 BUGTRAQ:20100929 ZDI-10-184: IBM TSM FastBack Server USER_S_AddADGroup Remote Code Execution Vulnerability  View
505224 46342 CVE-2010-3758 URL:http://www.securityfocus.com/archive/1/archive/1/514059/100/0/threaded  View
505225 46342 CVE-2010-3758 MISC:http://zerodayinitiative.com/advisories/ZDI-10-180/  View
505226 46342 CVE-2010-3758 MISC:http://zerodayinitiative.com/advisories/ZDI-10-181/  View
505227 46342 CVE-2010-3758 MISC:http://zerodayinitiative.com/advisories/ZDI-10-183/  View
505228 46342 CVE-2010-3758 MISC:http://zerodayinitiative.com/advisories/ZDI-10-184/  View
505229 46342 CVE-2010-3758 CONFIRM:http://www.ibm.com/support/docview.wss?uid=swg21443820  View
505230 46342 CVE-2010-3758 AIXAPAR:IC69883  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
36834 JVNDB-2010-002614 ISC BIND におけるサービス運用妨害 (DoS) の脆弱性 ISC BIND は、DNSSEC 検証が有効に設定されている状態において、シングルゾーンに対する複数のトラストアンカーが存在する際、不正な署名を適切に処理しないため、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-3762 46342 4.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-002614.html  View