CVE-2015-4935
HighSummary
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
Risk Assessment
Attackers may exploit this vulnerability to remotely execute code, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to upgrade to version 6.1.12.1 or later to mitigate the risk associated with this vulnerability.
Other vulnerabilities in IBM Tivoli Storage Manager FastBack 6.1
See all- CVE-2016-5934High
The IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. An attacker could exploit this vulnerability by placing a specially-crafted DLL in the victim's path, allowing arbitrary code to run with the victim's privileges.
- CVE-2015-8523High
The server in IBM Tivoli Storage Manager FastBack in versions 5.5.x and 6.x before 6.1.12.2 allows remote attackers to cause a denial of service (service crash) via crafted packets to a TCP port.
- CVE-2015-4934High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4933High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4932High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-4931High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet.
- CVE-2015-1986High
The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, which is a different vulnerability than CVE-2015-1938.
- CVE-2015-1965High
A stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a daemon crash.
- CVE-2015-1964High
Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
- CVE-2015-1963High
There is a stack-based buffer overflow in the server of IBM Tivoli Storage Manager FastBack 6.1 before version 6.1.12, allowing remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
Original NVD description (English source)
Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability than CVE-2015-4931, CVE-2015-4932, CVE-2015-4933, and CVE-2015-4934.