Unscored CVE-2010-3756 EUVD-2010-3735GHSA-3xpw-r9fx-85m3

The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.…

Published Oct 5, 2010 · Updated Aug 7, 2024 · Assigned by mitre

Description

The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service (daemon crash) by sending data over TCP. NOTE: this might overlap CVE-2010-3060.

References

20100929 ZDI-10-186: IBM TSM FastBack _CalcHashValueWithLength Remote Denial of Service Vulnerability mailing-list
http://www.ibm.com/support/docview.wss?uid=swg21443820
IC69883 vendor-advisory
http://zerodayinitiative.com/advisories/ZDI-10-186/