IBM Tivoli Storage Manager Client CVE-2013-2964 Local Buffer Overflow Vulnerability

Bugtraq ID:	62789
Class:	Boundary Condition Error
CVE:	CVE-2013-2964
Remote:	No
Local:	Yes
Published:	Oct 01 2013 12:00AM
Updated:	Jan 28 2015 12:03AM
Credit:	The vendor reported this issue.
Vulnerable:	IBM IBM Tivoli Storage Manager Client 6.2.2 IBM IBM Tivoli Storage Manager Client 6.2.2 IBM IBM Tivoli Storage Manager Client 5.5.3 IBM IBM Tivoli Storage Manager Client 6.2.1.1 IBM IBM Tivoli Storage Manager Client 6.2.1.0 IBM IBM Tivoli Storage Manager Client 6.2.0.0 IBM IBM Tivoli Storage Manager Client 5.5.2.7 IBM IBM Tivoli Storage Manager Client 5.5.2.12 IBM IBM Tivoli Storage Manager Client 5.5.0.0 IBM IBM Tivoli Storage Manager Client 5.4.3.4 IBM IBM Tivoli Storage Manager Client 5.4.3.3 IBM IBM Tivoli Storage Manager Client 5.4.0.0 IBM IBM Tivoli Storage Manager Client 5.3.6.7 IBM IBM Tivoli Storage Manager Client 5.3.6.10 IBM IBM Tivoli Storage Manager Client 5.3.0.0
Not Vulnerable:

IBM Tivoli Storage Manager Client CVE-2013-2964 Local Buffer Overflow Vulnerability

IBM Tivoli Storage Manager Client is prone to a local buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successful exploits may allow attackers to execute arbitrary code in context of the application. Failed exploits may result in denial-of-service conditions.

IBM Tivoli Storage Manager Client CVE-2013-2964 Local Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Tivoli Storage Manager Client CVE-2013-2964 Local Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Tivoli Storage Manager Client CVE-2013-2964 Local Buffer Overflow Vulnerability

References:

• IBM Homepage (IBM)