CVE-2008-4801: Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the…

PriorityP356critical10CVSS 2.0

AVNACLAuNCCICAC

EPSS

11.38%

95.5th percentile

Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.0.0 through 5.2.5.2, 5.3.0.0 through 5.3.6.1, 5.4.0.0 through 5.4.2.2, and 5.5.0.0 through 5.5.0.91 in IBM Tivoli Storage Manager (TSM); and the Backup-Archive client in TSM Express; allows remote attackers to execute arbitrary code by sending a large amount of crafted data to a TCP port.

Affected

5 ranges

Vendor	Product	Version range	Fixed in
ibm	tivoli_storage_manager_client	5.1 – 5.1.8.1	—
ibm	tivoli_storage_manager_client	5.2 – 5.2.5.2	—
ibm	tivoli_storage_manager_client	5.3 – 5.3.6.1	—
ibm	tivoli_storage_manager_client	5.4 – 5.4.2.2	—
ibm	tivoli_storage_manager_client	5.5.0.0 – 5.5.0.91	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.