TROYANOSYVIRUS
Back to CVEs

CVE-2010-3758

N/A

Description

Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka _SendToLog) function; the (2) group, (3) workgroup, or (4) domain name field to the USER_S_AddADGroup function; the (5) user_path variable to the FXCLI_checkIndexDBLocation function; or (6) the _AGI_S_ActivateLTScriptReply (aka ActivateLTScriptReply) function. NOTE: this might overlap CVE-2010-3059.

CVE Details

CVSS v3.1 ScoreN/A
Published10/5/2010
Last Modified4/29/2026
Sourcenvd
Honeypot Sightings0

Affected Products

ibm:tivoli_storage_manager_fastback

Weaknesses (CWE)

CWE-94

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883(af854a3a-2127-422b-91ae-364da2661108)
http://www.ibm.com/support/docview.wss?uid=swg21443820(af854a3a-2127-422b-91ae-364da2661108)
http://zerodayinitiative.com/advisories/ZDI-10-180/(af854a3a-2127-422b-91ae-364da2661108)
http://zerodayinitiative.com/advisories/ZDI-10-181/(af854a3a-2127-422b-91ae-364da2661108)
http://zerodayinitiative.com/advisories/ZDI-10-183/(af854a3a-2127-422b-91ae-364da2661108)
http://zerodayinitiative.com/advisories/ZDI-10-184/(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.