CVE-2007-4880 in Tivoli Storage Manager
Summary
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservation
09/13/2007
Disclosure
09/27/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 3320 | IBM Tivoli Storage Manager memory corruption | 119 | High | Official fix | CVE-2007-4880 |
| 3319 | IBM Tivoli Storage Manager Client memory corruption | 119 | High | Official fix | CVE-2007-4880 |