Vulnerability in IBM Tivoli Storage Manager Fastback

CVE-2010-3760

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash, and recovery failure) by specifying a large size value within TCP packet data. NOTE: this might overlap CVE-2010-3061.

EPSS: 0.025 (83.3th percentile) — read the EPSS interpretation.

Affected products

Ibm Tivoli_storage_manager_fastback — versions 6.1.0.1, 5.5.4.0, 5.5.2
N/a — versions n/a

Weakness classification (CWE)

CWE-399

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)
cve@mitre.org (vendor-advisory, Vendor Advisory, x_refsource_AIXAPAR)