Vulnerability in IBM Tivoli Provisioning Manager OS Deployment
CVE-2007-1868
The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via crafted POST requests to port 8080/tcp or 443/tcp.
EPSS: 0.593 (99.1th percentile) — read the EPSS interpretation.
Affected products
- Ibm Tivoli_provisioning_manager_os_deployment — versions 5.1.0.116
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
- cve@mitre.org (Patch, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2007-1868?
- CVE-2007-1868 is a vulnerability in IBM Tivoli Provisioning Manager OS Deployment. Published 2007-04-04.
- Is CVE-2007-1868 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.