Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
APP:IBM:TIVOLI-FASTBACK-RCE |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
APP |
Keywords |
IBM Tivoli Storage Manager FastBack Mount Service Code Execution (TCP) |
Release Date |
2014/11/10 |
Update Number |
2439 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
APP: IBM Tivoli Storage Manager FastBack Mount Service Code Execution (TCP)
This signature detects attempts to exploit a known vulnerability against IBM Tivoli Storage Manager FastBack Mount Service. A successful attack can lead to arbitrary code execution.
Extended Description
The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service (application hang), via unspecified vectors.
Affected Products
- Ibm tivoli_storage_manager_fastback 5.5.0
- Ibm tivoli_storage_manager_fastback 5.5.1
- Ibm tivoli_storage_manager_fastback 5.5.2
- Ibm tivoli_storage_manager_fastback 5.5.2.0
- Ibm tivoli_storage_manager_fastback 5.5.3.0
- Ibm tivoli_storage_manager_fastback 5.5.4.0
- Ibm tivoli_storage_manager_fastback 5.5.5.0
- Ibm tivoli_storage_manager_fastback 5.5.6.0
- Ibm tivoli_storage_manager_fastback 6.1.0.0
References
- BugTraq: 42549
- CVE: CVE-2010-3058