CVE-2010-3758

IBM Tivoli Storage Manager FastBack 5.5.0.0-5.5.6.0 & 6.1.0.0-6.1.0.1 - Remote Code Execution

Title source: llm
STIX 2.1

Description

Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka _SendToLog) function; the (2) group, (3) workgroup, or (4) domain name field to the USER_S_AddADGroup function; the (5) user_path variable to the FXCLI_checkIndexDBLocation function; or (6) the _AGI_S_ActivateLTScriptReply (aka ActivateLTScriptReply) function. NOTE: this might overlap CVE-2010-3059.

References (10)

Core 10
Core References
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-10-183/
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-10-184/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/514078/100/0/threaded
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-10-181/
Third Party Advisory x_refsource_misc
http://zerodayinitiative.com/advisories/ZDI-10-180/
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/514072/100/0/threaded
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/514059/100/0/threaded
Vendor Advisory x_refsource_confirm
http://www.ibm.com/support/docview.wss?uid=swg21443820
Vendor Advisory vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/514067/100/0/threaded

Scores

EPSS 0.0666
EPSS Percentile 93.1%

Details

CWE
CWE-94
Status published
Products (10)
ibm/tivoli_storage_manager_fastback 5.5.0
ibm/tivoli_storage_manager_fastback 5.5.1
ibm/tivoli_storage_manager_fastback 5.5.2
ibm/tivoli_storage_manager_fastback 5.5.2.0
ibm/tivoli_storage_manager_fastback 5.5.3.0
ibm/tivoli_storage_manager_fastback 5.5.4.0
ibm/tivoli_storage_manager_fastback 5.5.5.0
ibm/tivoli_storage_manager_fastback 5.5.6.0
ibm/tivoli_storage_manager_fastback 6.1.0.0
ibm/tivoli_storage_manager_fastback 6.1.0.1
Published Oct 05, 2010
Tracked Since Feb 18, 2026