Description
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.
References
- 34077 vdb-entry
- 1021837 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21377388
- ADV-2009-0669 vdb-entry
- 20090310 IBM Tivoli Storage Manager Express Heap Buffer Overflow Vulnerability third-party-advisory
- 34245 third-party-advisory
- 52617 vdb-entry
- tivoli-tsm-adsmdll-bo(49188) vdb-entry
- 20090310 Assurent VR - IBM Tivoli Storage Manager Express Backup Server Heap Corruption mailing-list