NVD

Id
15099  
Name
CVE-2010-3754  
Description
The FXCLI_OraBR_Exec_Command function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields to determine the content and length of data copied to memory, which allows remote attackers to execute arbitrary code via a crafted packet. NOTE: this might overlap CVE-2010-3059.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-10-05  
Modified Date
2010-10-06  
Seq
2010-3754  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
84484 15099 CVE-2010-3754 IC69883  View
84485 15099 CVE-2010-3754 http://www.ibm.com/support/docview.wss?uid=swg21443820  View
84486 15099 CVE-2010-3754 20100929 ZDI-10-182: IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities  View
84487 15099 CVE-2010-3754 http://zerodayinitiative.com/advisories/ZDI-10-182/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37442 JVNDB-2010-003227 IBM TSM FastBack の FXCLI_OraBR_Exec_Command 関数における任意のコードを実行される脆弱性 IBM Tivoli Storage Manager (TSM) FastBack の Server の FastBackServer.exe の FXCLI_OraBR_Exec_Command 関数は、メモリにコピーされたコンテンツおよびデータ長の決定に際し、パケットフィールドの値を使用するため、任意のコードを実行される脆弱性が存在します。 CVE-2010-3754 46334 CVE-2010-3754 15099 10 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003227.html 2010-07-18 2012-03-27 View