CVE-2002-0541 — Improper Restriction of Operations within the Bounds of a Memory Buffer in IBM Tivoli Storage Manager

3 documents3 sources
Severity
7.5HIGHNVD
EPSS
4.1%
top 11.38%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
IBM Tivoli Storage Manager
Timeline
PublishedJul 3
Latest updateApr 30

Description

Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/tivoli_storage_manager4.2, 4.2.1+1

Patches

Patch: online.securityfocus.com ↗Patch: www.iss.net ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-wrx2-hpw5-983c: Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3↗2022-04-30
▶
CVEList
CVE-2002-0541: Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3↗2002-06-11
▶
CVE-2002-0541 — IBM vulnerability | cvebase