Published: 28/09/2007 Updated: 29/07/2017

CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10

VMScore: 1000

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Subscribe to Tivoli Storage Manager Client

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 prior to 5.1.8.1, 5.2 prior to 5.2.5.2, 5.3 prior to 5.3.5.3, and 5.4 prior to 5.4.1.2 allows remote malicious users to execute arbitrary code via crafted HTTP headers, aka IC52905.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ibm tivoli storage manager client 5.3.5.2
ibm tivoli storage manager client 5.4
ibm tivoli storage manager client 5.1.8.0
ibm tivoli storage manager client 5.2
ibm tivoli storage manager client 5.1
ibm tivoli storage manager client 5.4.1.1
ibm tivoli storage manager client 5.2.5.1
ibm tivoli storage manager client 5.3

#!/usr/bin/python # # IBM Tivoli Storage Manager Express CAD Service Buffer Overflow (53) # wwwzerodayinitiativecom/advisories/ZDI-07-054html # Tested on windows 2003 server SP0 # Coded by Mati Aharoni # mutsatoffensive-securitycom # wwwoffensive-securitycom/0day/dsmcadpytxt # # bt ~ # /dsmcadpy 1921681107 # [*] IBM ...

## # $Id: ibm_tsm_cad_headerrb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' cla ...

CWE-119 http://www.securityfocus.com/archive/1/480492 http://www.zerodayinitiative.com/advisories/ZDI-07-054.html http://www-1.ibm.com/support/docview.wss?uid=swg21268775 http://www-1.ibm.com/support/search.wss?rs=0&q=IC52905&apar=only http://www.securityfocus.com/bid/25743 http://www.securitytracker.com/id?1018725 http://secunia.com/advisories/26883 http://securityreason.com/securityalert/3184 http://osvdb.org/38161 http://www.vupen.com/english/advisories/2007/3228 https://exchange.xforce.ibmcloud.com/vulnerabilities/36700 https://nvd.nist.gov https://www.exploit-db.com/exploits/4573/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2007-4880

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect