CVE-2015-1896
HighSummary
A stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.11.1 allows remote attackers to execute arbitrary code.
Risk Assessment
Attackers may exploit this vulnerability to execute arbitrary code remotely, posing a significant threat to the security of the system and the organization's data.
Recommendation
It is recommended to update IBM Tivoli Storage Manager FastBack to version 6.1.11.1 or later to mitigate this vulnerability.
Other vulnerabilities in IBM Tivoli Storage Manager FastBack 6.1
See all- CVE-2016-5934High
The IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. An attacker could exploit this vulnerability by placing a specially-crafted DLL in the victim's path, allowing arbitrary code to run with the victim's privileges.
- CVE-2015-8523High
The server in IBM Tivoli Storage Manager FastBack in versions 5.5.x and 6.x before 6.1.12.2 allows remote attackers to cause a denial of service (service crash) via crafted packets to a TCP port.
- CVE-2015-4935High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4934High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4933High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4932High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4931High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-1986High
The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, which is a different vulnerability than CVE-2015-1938.
- CVE-2015-1965High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a daemon crash.
- CVE-2015-1964High
Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
Original NVD description (English source)
Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows remote attackers to execute arbitrary code via unspecified vectors.