Login Request a demo
Unscored severity · published Sep 28, 2007
CVE-2007-4880
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3,…
–
CVSS
75.9%
EPSS
No
On KEV
Description
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.
Exploitation
Is it being used?
Exploit prediction (EPSS)75.9% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tivoli Storage Manager Client · Ibm
5.1; 5.1.8.0; 5.2; 5.2.5.1; 5.3; 5.3.5.2; +2 more · source: NVD
Affected product
TS
Tivoli Storage Manager Client
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-4880
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-4880
osvdb.org
http://osvdb.org/38161
Vendor Advisory
http://secunia.com/advisories/26883
securityreason.com
http://securityreason.com/securityalert/3184
Patch
http://www-1.ibm.com/support/docview.wss?uid=swg21268775
Patch
http://www-1.ibm.com/support/search.wss?rs=0&q=IC52905&apar=only
www.securityfocus.com
http://www.securityfocus.com/archive/1/480492
More from Tivoli Storage Manager Client
–
CVE-2009-1522
The IBM Tivoli Storage Manager (TSM) client 5.5.0.0 through 5.5.1.17 on AIX and Windows, when SSL is used, allows remote attackers to conduct unspecified man-in-the-middle attacks…
–
CVE-2009-1521
Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0…
–
CVE-2009-1520
Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6,…
–
CVE-2008-4828
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3,…
–
CVE-2008-4801
Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0…