IBM Tivoli Management Framework 'opts' Argument Stack Buffer Overflow Vulnerability

Bugtraq ID:	48049
Class:	Input Validation Error
CVE:	CVE-2011-1220
Remote:	Yes
Local:	No
Published:	May 31 2011 12:00AM
Updated:	Jul 21 2011 10:00PM
Credit:	Tenable Network Security
Vulnerable:	IBM Tivoli Management Framework 4.3.1 IBM Tivoli Management Framework 4.1.1 IBM Tivoli Management Framework 4.1
Not Vulnerable:

IBM Tivoli Management Framework 'opts' Argument Stack Buffer Overflow Vulnerability

IBM Tivoli Management Framework is prone to a remote stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied input.

Successfully exploiting this issue may allow remote attackers to execute arbitrary code. Failed attacks will cause denial-of-service conditions.

IBM Tivoli Management Framework 4.1, 4.1.1, and 4.3.1 are vulnerable.

IBM Tivoli Management Framework 'opts' Argument Stack Buffer Overflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/48049.py
• /data/vulnerabilities/exploits/48049.rb

IBM Tivoli Management Framework 'opts' Argument Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references for more information.

IBM Tivoli Management Framework 'opts' Argument Stack Buffer Overflow Vulnerability

References:

• IBM Tivoli Endpoint lcfd.exe opts Argument Remote Code Execution (IBM)
  
• Product Homepage (IBM)
  
• ZDI-11-169: IBM Tivoli Endpoint lcfd.exe opts Argument Remote Code Execution Vu (ZDI Disclosures )
  
• ZDI-11-169 IBM Tivoli Endpoint lcfd.exe opts Argument Remote Code Execution Vuln (Zero Day Initiative)