First published: Tue Oct 05 2010(Updated: )
The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service (daemon crash) by sending data over TCP. NOTE: this might overlap CVE-2010-3060.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Tivoli Storage Manager FastBack | =5.5.0 | |
IBM Tivoli Storage Manager FastBack | =5.5.1 | |
IBM Tivoli Storage Manager FastBack | =5.5.2 | |
IBM Tivoli Storage Manager FastBack | =5.5.2.0 | |
IBM Tivoli Storage Manager FastBack | =5.5.3.0 | |
IBM Tivoli Storage Manager FastBack | =5.5.4.0 | |
IBM Tivoli Storage Manager FastBack | =5.5.5.0 | |
IBM Tivoli Storage Manager FastBack | =5.5.6.0 | |
IBM Tivoli Storage Manager FastBack | =6.1.0.0 | |
IBM Tivoli Storage Manager FastBack | =6.1.0.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-3756 has a severity level that can lead to a denial of service due to a daemon crash.
To fix CVE-2010-3756, upgrade IBM Tivoli Storage Manager FastBack to a version that addresses this vulnerability.
CVE-2010-3756 affects versions 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 of IBM Tivoli Storage Manager FastBack.
CVE-2010-3756 allows remote attackers to conduct a denial of service attack by causing a crash of the daemon.
Exploitation of CVE-2010-3756 can be performed by remote attackers without requiring authentication.