Buffer overflow in IBM Tivoli Netcool Application Service Monitors

CVE-2013-0508

Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 and 4.0.1 before FP1 allow context-dependent attackers to execute arbitrary code or cause a denial of service via a long line in (1) hrfstable.idx, (2) hrdevice.idx, (3) hrstorage.idx, or (4) lotusmapfile in the SSM Config directory, or (5) .manifest.hive in the main agent directory.

Vulnerability class: Buffer Overflow

EPSS: 0.030 (85.8th percentile) — read the EPSS interpretation.