CVE-2015-1942
HighSummary
The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to write to arbitrary files and subsequently execute these files via a crafted TCP packet to an unspecified port.
Risk Assessment
Attackers can exploit this vulnerability to remotely execute malicious code, potentially leading to data loss or system takeover.
Recommendation
It is recommended to upgrade to version 6.1.12 or later to mitigate this vulnerability.
Other vulnerabilities in IBM Tivoli Storage Manager FastBack 6.1
See all- CVE-2016-5934High
The IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. An attacker could exploit this vulnerability by placing a specially-crafted DLL in the victim's path, allowing arbitrary code to run with the victim's privileges.
- CVE-2015-8523High
The server in IBM Tivoli Storage Manager FastBack in versions 5.5.x and 6.x before 6.1.12.2 allows remote attackers to cause a denial of service (service crash) via crafted packets to a TCP port.
- CVE-2015-4935High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4934High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4933High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4932High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4931High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-1986High
The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, which is a different vulnerability than CVE-2015-1938.
- CVE-2015-1965High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a daemon crash.
- CVE-2015-1964High
Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
Original NVD description (English source)
The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to write to arbitrary files, and subsequently execute these files, via a crafted TCP packet to an unspecified port.