The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service (application hang), via unspecified vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Tivoli_storage_manager_fastback | Ibm | 5.5.0 (including) | 5.5.0 (including) |
| Tivoli_storage_manager_fastback | Ibm | 5.5.1 (including) | 5.5.1 (including) |
| Tivoli_storage_manager_fastback | Ibm | 5.5.2 (including) | 5.5.2 (including) |
| Tivoli_storage_manager_fastback | Ibm | 5.5.2.0 (including) | 5.5.2.0 (including) |
| Tivoli_storage_manager_fastback | Ibm | 5.5.3.0 (including) | 5.5.3.0 (including) |
| Tivoli_storage_manager_fastback | Ibm | 5.5.4.0 (including) | 5.5.4.0 (including) |
| Tivoli_storage_manager_fastback | Ibm | 5.5.5.0 (including) | 5.5.5.0 (including) |
| Tivoli_storage_manager_fastback | Ibm | 5.5.6.0 (including) | 5.5.6.0 (including) |
| Tivoli_storage_manager_fastback | Ibm | 6.1.0.0 (including) | 6.1.0.0 (including) |
References
- http://secunia.com/advisories/41044
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
- http://www-01.ibm.com/support/docview.wss?uid=swg21443820
- http://www.securityfocus.com/bid/42549
- http://secunia.com/advisories/41044
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
- http://www-01.ibm.com/support/docview.wss?uid=swg21443820
- http://www.securityfocus.com/bid/42549