CVE-2010-3756: Input Validation
The CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service (daemon crash) by sending data over TCP. NOTE: this might overlap CVE-2010-3060.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3756?
CVE-2010-3756 has a severity level that can lead to a denial of service due to a daemon crash.
How do I fix CVE-2010-3756?
To fix CVE-2010-3756, upgrade IBM Tivoli Storage Manager FastBack to a version that addresses this vulnerability.
Which versions of IBM Tivoli Storage Manager FastBack are affected by CVE-2010-3756?
CVE-2010-3756 affects versions 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 of IBM Tivoli Storage Manager FastBack.
What type of attack does CVE-2010-3756 allow?
CVE-2010-3756 allows remote attackers to conduct a denial of service attack by causing a crash of the daemon.
Is CVE-2010-3756 easy to exploit?
Exploitation of CVE-2010-3756 can be performed by remote attackers without requiring authentication.