CVE-2010-3058 — IBM Tivoli Storage Manager Fastback vulnerability

CWE-3993 documents3 sources

Severity

7.5HIGHNVD

EPSS

2.4%

top 14.83%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Tivoli Storage Manager Fastback

Timeline

PublishedAug 20

Latest updateMay 17

Description

The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.x.x before 5.5.7, and 6.1.0.0, establishes an open UDP port, which might allow remote attackers to overwrite memory locations and execute arbitrary code, or cause a denial of service (application hang), via unspecified vectors.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/tivoli_storage_manager_fastback9 versions+8

🔴Vulnerability Details

GHSA

GHSA-pgv7-cg4f-x6hg: The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5↗2022-05-17

▶

CVEList

CVE-2010-3058: The Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5↗2010-08-20

▶