CVE-2008-4828

CVSS V2 High 10 CVSS V3 None
Description
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified "generic string handling function" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI.
Overview
  • CVE ID
  • CVE-2008-4828
  • Assigner
  • PSIRT-CNA@flexerasoftware.com
  • Vulnerability Status
  • Modified
  • Published Version
  • 2009-05-05T17:30:00
  • Last Modified Date
  • 2018-10-11T20:52:57
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1.8.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1.8.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.6.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.1:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.2:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.96:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.3.0:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.6.4:*:*:*:*:*:*:* 1 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:C/I:C/A:C
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • COMPLETE
  • Integrity Impact
  • COMPLETE
  • Availability Impact
  • COMPLETE
  • Base Score
  • 10
  • Severity
  • HIGH
  • Exploitability Score
  • 10
  • Impact Score
  • 10
References
Reference URL Reference Tags
http://www-01.ibm.com/support/docview.wss?uid=swg21384389 Patch Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg1IC59513 Patch Vendor Advisory
http://secunia.com/secunia_research/2008-55/ Vendor Advisory
http://osvdb.org/54232
http://osvdb.org/54231
http://secunia.com/advisories/32604
http://www.vupen.com/english/advisories/2009/1235
https://exchange.xforce.ibmcloud.com/vulnerabilities/50327
http://www.securityfocus.com/archive/1/503182/100/0/threaded
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2008-4828
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4828
History
Created Old Value New Value Data Type Notes
2022-05-10 18:27:40 Added to TrackCVE