Login Request a demo
Unscored severity · published Mar 11, 2009
CVE-2008-4563
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and…
–
CVSS
29%
EPSS
No
On KEV
Description
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.
Exploitation
Is it being used?
Exploit prediction (EPSS)29.0% · higher than 98% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tivoli Storage Manager · Ibm
5.2; 5.3; 5.3.0; 5.3.1; 5.3.2; 5.3.2.4; +10 more · source: NVD
TS
Tivoli Storage Manager Express · Ibm
5.3; 5.3.3.0; 5.3.6.4; 5.3.7.3 · source: NVD
Affected product
TS
Tivoli Storage Manager
Ibm
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-4563
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-4563
archives.neohapsis.com
http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html
labs.idefense.com
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775
osvdb.org
http://osvdb.org/52617
Vendor Advisory
http://secunia.com/advisories/34245
securitytracker.com
http://securitytracker.com/id?1021837
Patch
http://www-01.ibm.com/support/docview.wss?uid=swg21377388
More from Tivoli Storage Manager
9.8
CVE-2016-8937
The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information…
8.8
CVE-2016-8940
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries
8.8
CVE-2016-6045
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted…
7.8
CVE-2017-1378
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be…
7.8
CVE-2016-5985
The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled