CVE-2010-3758
- State
- Published
- Severity
- Not scored
- Published
- Oct 5, 2010
- Updated
- Aug 7, 2024
- Reserved
- Oct 5, 2010
Description
Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka _SendToLog) function; the (2) group, (3) workgroup, or (4) domain name field to the USER_S_AddADGroup function; the (5) user_path variable to the FXCLI_checkIndexDBLocation function; or (6) the _AGI_S_ActivateLTScriptReply (aka ActivateLTScriptReply) function. NOTE: this might overlap CVE-2010-3059.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://zerodayinitiative.com/advisories/ZDI-10-183/
- http://zerodayinitiative.com/advisories/ZDI-10-184/
- 20100929 ZDI-10-181: IBM TSM FastBack Server ActivateLTScriptReply Remote Code Execution Vulnerabilitymailing-list
- http://zerodayinitiative.com/advisories/ZDI-10-181/
- http://zerodayinitiative.com/advisories/ZDI-10-180/
- 20100929 ZDI-10-180: IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerabilitymailing-list
- 20100929 ZDI-10-184: IBM TSM FastBack Server USER_S_AddADGroup Remote Code Execution Vulnerabilitymailing-list
- http://www.ibm.com/support/docview.wss?uid=swg21443820
- IC69883vendor-advisory
- 20100929 ZDI-10-183: IBM TSM FastBack Server FXCLI_checkIndexDBLocation Remote Code Execution Vulnerabilitymailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.