First published: Tue Jun 30 2015(Updated: )
Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a different vulnerability than CVE-2015-1925, CVE-2015-1929, CVE-2015-1930, CVE-2015-1948, CVE-2015-1953, CVE-2015-1954, CVE-2015-1962, CVE-2015-1963, CVE-2015-1964, and CVE-2015-1965.
Credit: psirt@us.ibm.com
Affected Software | Affected Version | How to fix |
---|---|---|
IBM Tivoli Storage Manager FastBack | =6.1.0.0 | |
IBM Tivoli Storage Manager FastBack | =6.1.1.0 | |
IBM Tivoli Storage Manager FastBack | =6.1.7.2 | |
IBM Tivoli Storage Manager FastBack | =6.1.8.0 | |
IBM Tivoli Storage Manager FastBack | =6.1.8.1 | |
IBM Tivoli Storage Manager FastBack | =6.1.9.0 | |
IBM Tivoli Storage Manager FastBack | =6.1.9.1 | |
IBM Tivoli Storage Manager FastBack | =6.1.10.0 | |
IBM Tivoli Storage Manager FastBack | =6.1.10.1 | |
IBM Tivoli Storage Manager FastBack | =6.1.11.0 | |
IBM Tivoli Storage Manager FastBack | =6.1.11.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2015-1924 has a severity rating that indicates a potential denial of service due to a stack-based buffer overflow.
To fix CVE-2015-1924, you should update IBM Tivoli Storage Manager FastBack to version 6.1.12 or later.
The affected versions of IBM Tivoli Storage Manager FastBack include 6.1.0.0, 6.1.1.0, 6.1.7.2, 6.1.8.0, 6.1.8.1, 6.1.9.0, 6.1.9.1, 6.1.10.0, 6.1.10.1, 6.1.11.0, and 6.1.11.1.
CVE-2015-1924 facilitates a denial-of-service attack that can cause the server to crash.
There are no documented workarounds for CVE-2015-1924; the recommended action is to upgrade to a patched version.