Description
Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581.
References
- 20020411 iXsecurity.20020327.tivoli_tsm_dsmcad.a mailing-list
- tivoli-storagemanager-client-bo(8817) vdb-entry
- 4500 vdb-entry
- tivoli-storagemanager-login-bo(8825) vdb-entry
- 4492 vdb-entry
- 20020411 iXsecurity.20020328.tivoli_tsm_dsmsvc.a mailing-list
- http://www.tivoli.com/support/storage_mgr/flash_httpport.html