Description
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.
References
- http://www-1.ibm.com/support/docview.wss?uid=swg21250261
- http://www.tippingpoint.com/security/advisories/TSRT-06-14.html
- tivoli-registration-message-bo(30702) vdb-entry
- IC50347 vendor-advisory
- VU#350625 third-party-advisory
- 1979 third-party-advisory
- ADV-2006-4856 vdb-entry
- 21440 vdb-entry
- VU#887249 third-party-advisory
- 1017333 vdb-entry
- 20061204 TSRT-06-14: IBM Tivoli Storage Manager Mutiple Buffer Overflow Vulnerabilities mailing-list
- tivoli-login-language-bo(30699) vdb-entry
- 23177 third-party-advisory
- tivoli-smexecutewdsfsession-bo(30701) vdb-entry
- VU#478753 third-party-advisory