NVD

Id
4642  
Name
CVE-2008-4828  
Description
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified "generic string handling function" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-05-05  
Modified Date
2009-05-19  
Seq
2008-4828  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
29106 4642 CVE-2008-4828 http://www-01.ibm.com/support/docview.wss?uid=swg21384389  View
29107 4642 CVE-2008-4828 IC59513  View
29108 4642 CVE-2008-4828 20090504 Secunia Research: IBM Tivoli Storage Manager Remote Agent Service Buffer Overflows  View
29109 4642 CVE-2008-4828 ADV-2009-1235  View
29110 4642 CVE-2008-4828 ibm-tsm-dsmagent-bo(50327)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43036 JVNDB-2009-004043 Remote Agent Service の dsmagent.exe におけるスタックベースのバッファオーバーフローの脆弱性 IBM Tivoli Storage Manager (TSM) クライアントおよび TSM Express クライアントの Remote Agent Service の dsmagent.exe には、(a) Web GUI および (b) Java GUI に関連する処理に不備があるため、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-4828 34941 CVE-2008-4828 4642 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004043.html 2009-05-01 2012-09-25 View