cbcvebase.
CVE-2016-5985
published 2017-02-01

CVE-2016-5985: The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker…

PriorityP336high7.8CVSS 3.0
AVLACLPRLUINSUCHIHAH
EPSS
0.42%
34.3th percentile
The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled. A local attacker could overflow a buffer and execute arbitrary code on the system or cause a system crash.

Affected

63 ranges· showing 25
VendorProductVersion rangeFixed in
ibmtivoli_storage_manager<= 7.1.6.2—
ibmtivoli_storage_manager<= 6.4.3.3—
ibmtivoli_storage_manager<= 6.3.2.5—
ibmtivoli_storage_manager<= 6.1—
ibmtivoli_storage_manager<= 6.2—
ibmtivoli_storage_manager<= 5.5—
ibmtivoli_storage_manager——
ibmtivoli_storage_manager——
ibmtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——
ibm_corporationtivoli_storage_manager——

CVSS provenance

nvdv3.07.8HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.