IBM Tivoli Storage Manager Express Remote Heap Overflow Vulnerability
BID:27235
Info
IBM Tivoli Storage Manager Express Remote Heap Overflow Vulnerability
| Bugtraq ID: | 27235 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2008-0247 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2008 12:00AM |
| Updated: | Jan 17 2008 11:08PM |
| Credit: | TippingPoint reported this issue to IBM. |
| Vulnerable: |
IBM Tivoli Storage Manager Express 5.3 |
| Not Vulnerable: |
IBM Tivoli Storage Manager Express 5.3.7 .3 |
Discussion
IBM Tivoli Storage Manager Express Remote Heap Overflow Vulnerability
IBM Tivoli Storage Manager Express is prone to a remote heap-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.
Exploiting this issue allows attackers to execute arbitrary machine code with SYSTEM privileges. Failed exploit attempts will likely result in denial-of-service conditions.
This issue affects IBM Tivoli Storage Manager Express 5.3 for Microsoft Windows 2003 server platforms; other versions may also be vulnerable.
IBM Tivoli Storage Manager Express is prone to a remote heap-overflow vulnerability because the software fails to properly bounds-check user-supplied data before copying it to an insufficiently sized buffer.
Exploiting this issue allows attackers to execute arbitrary machine code with SYSTEM privileges. Failed exploit attempts will likely result in denial-of-service conditions.
This issue affects IBM Tivoli Storage Manager Express 5.3 for Microsoft Windows 2003 server platforms; other versions may also be vulnerable.
Exploit / POC
IBM Tivoli Storage Manager Express Remote Heap Overflow Vulnerability
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
IBM Tivoli Storage Manager Express Remote Heap Overflow Vulnerability
Solution:
The vendor has released a fix for this issue. Please see the referenced advisory for information on obtaining and applying the appropriate updates.
IBM Tivoli Storage Manager Express 5.3
Solution:
The vendor has released a fix for this issue. Please see the referenced advisory for information on obtaining and applying the appropriate updates.
IBM Tivoli Storage Manager Express 5.3
References
IBM Tivoli Storage Manager Express Remote Heap Overflow Vulnerability
References:
References: