Description
Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value.
References
- 28440 third-party-advisory
- ibm-tsmexpressserver-bo(39604) vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-08-001.html
- http://www-1.ibm.com/support/docview.wss?uid=swg21291536
- ADV-2008-0106 vdb-entry
- 27235 vdb-entry
- 20080114 ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow Vulnerability mailing-list
- 1019182 vdb-entry