CVE-2010-3758

published 2010-10-05

CVE-2010-3758: Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0…

Priority P3 50 critical 10 CVSS 2.0

AV N AC L Au N C C I C A C

Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the (1) AGI_SendToLog (aka _SendToLog) function; the (2) group, (3) workgroup, or (4) domain name field to the USER_S_AddADGroup function; the (5) user_path variable to the FXCLI_checkIndexDBLocation function; or (6) the _AGI_S_ActivateLTScriptReply (aka ActivateLTScriptReply) function. NOTE: this might overlap CVE-2010-3059.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
ibm	tivoli_storage_manager_fastback	—	—
ibm	tivoli_storage_manager_fastback	—	—
ibm	tivoli_storage_manager_fastback	—	—
ibm	tivoli_storage_manager_fastback	—	—
ibm	tivoli_storage_manager_fastback	—	—
ibm	tivoli_storage_manager_fastback	—	—
ibm	tivoli_storage_manager_fastback	—	—
ibm	tivoli_storage_manager_fastback	—	—
ibm	tivoli_storage_manager_fastback	—	—
ibm	tivoli_storage_manager_fastback	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-94