CVE-2008-4563

IBM Tivoli Storage Manager 5.2-5.3.6.0/5.4.0.0-5.4.4.0 - RCE via Heap Overflow in adsmdll.dll

Title source: llm

Description

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.

References (9)

Core 9

Core References

Patch, Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21377388

Vendor Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/0669

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/34245

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/52617

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/49188

Third Party Advisory mailing-list x_refsource_fulldisc

http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/34077

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1021837

Third Party Advisory third-party-advisory x_refsource_idefense

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775

Scores

EPSS 0.2899

EPSS Percentile 97.9%

Details

CWE

CWE-119

Status published

Products (20)

ibm/tivoli_storage_manager 5.2

ibm/tivoli_storage_manager 5.3

ibm/tivoli_storage_manager 5.3.0

ibm/tivoli_storage_manager 5.3.1

ibm/tivoli_storage_manager 5.3.2

ibm/tivoli_storage_manager 5.3.2.4

ibm/tivoli_storage_manager 5.3.3

ibm/tivoli_storage_manager 5.3.4

ibm/tivoli_storage_manager 5.3.5.1

ibm/tivoli_storage_manager 5.4.0

... and 10 more

Published Mar 11, 2009

Tracked Since Feb 18, 2026