CVE-2007-4880

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.

Link	Resource
http://www.securityfocus.com/archive/1/480492
http://www.zerodayinitiative.com/advisories/ZDI-07-054.html
http://www-1.ibm.com/support/docview.wss?uid=swg21268775	Patch
http://www-1.ibm.com/support/search.wss?rs=0&q=IC52905&apar=only	Patch
http://www.securityfocus.com/bid/25743	Patch
http://www.securitytracker.com/id?1018725
http://secunia.com/advisories/26883	Vendor Advisory
http://securityreason.com/securityalert/3184
http://osvdb.org/38161
http://www.vupen.com/english/advisories/2007/3228
https://exchange.xforce.ibmcloud.com/vulnerabilities/36700

Configuration 1

cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3:*:*:*:*:*:*:* cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4.1.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2.5.1:*:*:*:*:*:*:* cpe:2.3:a:ibm:tivoli_storage_manager_client:5.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4:*:*:*:*:*:*:* cpe:2.3:a:ibm:tivoli_storage_manager_client:5.3.5.2:*:*:*:*:*:*:* cpe:2.3:a:ibm:tivoli_storage_manager_client:5.1.8.0:*:*:*:*:*:*:*

---

Published : 2007-09-28 12:17

Updated : 2017-07-29 01:33

---

NVD link : CVE-2007-4880

Mitre link : CVE-2007-4880

No products.

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer