CVE-2010-3756

The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service (daemon crash) by sending data over TCP. NOTE: this might overlap CVE-2010-3060.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2010-10-05

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• Tivoli Storage Manager Fastback (Ibm)

References

• http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
• http://www.ibm.com/support/docview.wss?uid=swg21443820
• http://www.securityfocus.com/archive/1/514070/100/0/threaded
• http://zerodayinitiative.com/advisories/ZDI-10-186/