Vulnerability CVE-2008-4563 - CERT Civis.Net

Vulnerability Name:

CVE-2008-4563 (CCN-49188)

Assigned:

2008-10-14

Published:

2009-03-10

Updated:

2017-08-08

Summary:

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.

CVSS v3 Severity:

10.0 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): None
Scope:	Scope (S): Changed
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

10.0 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

10.0 High (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C)
7.4 High (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Athentication (Au): None
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: CCN
Type: Full-Disclosure Mailing List, Tue Mar 10 2009 - 14:42:05 CDT
Assurent VR - IBM Tivoli Storage Manager Express Backup Server Heap Corruption

Source: FULLDISC
Type: UNKNOWN
20090310 Assurent VR - IBM Tivoli Storage Manager Express Backup Server Heap Corruption

Source: MITRE
Type: CNA
CVE-2008-4563

Source: IDEFENSE
Type: UNKNOWN
20090310 IBM Tivoli Storage Manager Express Heap Buffer Overflow Vulnerability

Source: OSVDB
Type: UNKNOWN
52617

Source: CCN
Type: SA34245
IBM Tivoli Storage Manager Buffer Overflow Vulnerability

Source: SECUNIA
Type: Vendor Advisory
34245

Source: CCN
Type: SECTRACK ID: 1021837
IBM Tivoli Storage Manager Express Heap Overflow in 'adsmdll.dll' Lets Remote Users Execute Arbitrary Code

Source: SECTRACK
Type: UNKNOWN
1021837

Source: CCN
Type: IBM Support & downloads
Tivoli Storage Manager Server Buffer Overrun Security Vulnerability

Source: CONFIRM
Type: Patch, Vendor Advisory
http://www-01.ibm.com/support/docview.wss?uid=swg21377388

Source: CCN
Type: OSVDB ID: 52617
IBM Tivoli Storage Manager (TSM) Express adsmdll.dll Length Value Handling Remote Overflow

Source: BID
Type: UNKNOWN
34077

Source: CCN
Type: BID-34077
IBM Tivoli Storage Manager Express and Enterprise Server Remote Buffer Overflow Vulnerability

Source: VUPEN
Type: Vendor Advisory
ADV-2009-0669

Source: XF
Type: UNKNOWN
tivoli-tsm-adsmdll-bo(49188)

Source: XF
Type: UNKNOWN
tivoli-tsm-adsmdll-bo(49188)

Source: CCN
Type: iDefense PUBLIC ADVISORY: 03.10.09
IBM Tivoli Storage Manager Express Heap Buffer Overflow Vulnerability

Vulnerable Configuration:

Configuration 1:

cpe:/o:microsoft:windows:*:*:*:*:*:*:*:*

AND

cpe:/a:ibm:tivoli_storage_manager:5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.2.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.2.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.2.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.4.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager_express:5.3.3.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager_express:5.3.6.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager_express:5.3.7.3:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:ibm:tivoli_storage_manager:5.2.5.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.2.7:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.2.8:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.2.9:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager_express:5.3.7.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.4.0:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.2.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.2.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.4.2.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.2.5.3:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.2.5.2:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.2.4:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*

OR cpe:/a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*

Denotes that component is vulnerable