CVE-2010-3758

N/A

Descricao

Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka _SendToLog) function; the (2) group, (3) workgroup, or (4) domain name field to the USER_S_AddADGroup function; the (5) user_path variable to the FXCLI_checkIndexDBLocation function; or (6) the _AGI_S_ActivateLTScriptReply (aka ActivateLTScriptReply) function. NOTE: this might overlap CVE-2010-3059.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado10/5/2010

Ultima modificacao4/29/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

ibm:tivoli_storage_manager_fastback

Fraquezas (CWE)

CWE-94

Referencias

http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883(cve@mitre.org)

http://www.ibm.com/support/docview.wss?uid=swg21443820(cve@mitre.org)

http://www.securityfocus.com/archive/1/514059/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/archive/1/514067/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/archive/1/514072/100/0/threaded(cve@mitre.org)

http://www.securityfocus.com/archive/1/514078/100/0/threaded(cve@mitre.org)

http://zerodayinitiative.com/advisories/ZDI-10-180/(cve@mitre.org)

http://zerodayinitiative.com/advisories/ZDI-10-181/(cve@mitre.org)

http://zerodayinitiative.com/advisories/ZDI-10-183/(cve@mitre.org)

http://zerodayinitiative.com/advisories/ZDI-10-184/(cve@mitre.org)

http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883(af854a3a-2127-422b-91ae-364da2661108)

http://www.ibm.com/support/docview.wss?uid=swg21443820(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/514059/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/514067/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/514072/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/archive/1/514078/100/0/threaded(af854a3a-2127-422b-91ae-364da2661108)

http://zerodayinitiative.com/advisories/ZDI-10-180/(af854a3a-2127-422b-91ae-364da2661108)

http://zerodayinitiative.com/advisories/ZDI-10-181/(af854a3a-2127-422b-91ae-364da2661108)

http://zerodayinitiative.com/advisories/ZDI-10-183/(af854a3a-2127-422b-91ae-364da2661108)

http://zerodayinitiative.com/advisories/ZDI-10-184/(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.