RCE in IBM Tivoli Storage Manager Fastback
CVE-2010-3757
Format string vulnerability in the _Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via format string specifiers located after a | (pipe) character in a string. NOTE: this might overlap CVE-2010-3059.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.041 (89.8th percentile) — read the EPSS interpretation.
Affected products
- Ibm Tivoli_storage_manager_fastback — versions 6.1.0.1, 5.5.4.0, 5.5.2
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
- cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)