CVE-2015-0119
HighSummary
FastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote attackers to execute arbitrary code by connecting to the Mount port.
Risk Assessment
Attackers can remotely take control of the system, potentially leading to data loss or system compromise.
Recommendation
It is recommended to upgrade to version 6.1.11.1 or later to mitigate this vulnerability.
Other vulnerabilities in IBM Tivoli Storage Manager FastBack
See all- CVE-2016-5934High
The IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. An attacker could exploit this vulnerability by placing a specially-crafted DLL in the victim's path, allowing arbitrary code to run with the victim's privileges.
- CVE-2015-8523High
The server in IBM Tivoli Storage Manager FastBack in versions 5.5.x and 6.x before 6.1.12.2 allows remote attackers to cause a denial of service (service crash) via crafted packets to a TCP port.
- CVE-2015-4935High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4934High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4933High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4932High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4931High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-1986High
The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, which is a different vulnerability than CVE-2015-1938.
- CVE-2015-1965High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a daemon crash.
- CVE-2015-1964High
Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
Original NVD description (English source)
FastBack Mount in IBM Tivoli Storage Manager FastBack 6.1.x before 6.1.11.1 allows remote attackers to execute arbitrary code by connecting to the Mount port.