ZDI-07-054: IBM Tivoli Storage Manager Express CAD Service Buffer Overflow Vulnerability
[email protected] Mon, 24 Sep 2007 15:17:55 -0700
| Newsgroups | gmane.comp.security.bugtraq,gmane.comp.security.full-disclosure,gmane.comp.security.vulnerabilities.watch.general |
|---|---|
| Message-ID | <OFB132DFC5.AB4657A5-ON88257360.0079848A-88257360.007A7D21@3com.com> |
WkRJLTA3LTA1NDogSUJNIFRpdm9saSBTdG9yYWdlIE1hbmFnZXIgRXhwcmVzcyBDQUQgU2Vydmlj ZSBCdWZmZXINCiAgICAgICAgICAgIE92ZXJmbG93IFZ1bG5lcmFiaWxpdHkNCmh0dHA6Ly93d3cu emVyb2RheWluaXRpYXRpdmUuY29tL2Fkdmlzb3JpZXMvWkRJLTA3LTA1NC5odG1sDQpTZXB0ZW1i ZXIgMjQsIDIwMDcNCg0KLS0gQ1ZFIElEOg0KQ1ZFLTIwMDctNDg4MA0KDQotLSBBZmZlY3RlZCBW ZW5kb3I6DQpJQk0NCg0KLS0gQWZmZWN0ZWQgUHJvZHVjdHM6DQpUaXZvbGkgU3RvcmFnZSBNYW5h Z2VyIEV4cHJlc3MgYmFja3VwIGNsaWVudHMNClRpdm9saSBTdG9yYWdlIE1hbmFnZXIgVjUuMSBi YWNrdXAgY2xpZW50cw0KVGl2b2xpIFN0b3JhZ2UgTWFuYWdlciBWNS4yIGJhY2t1cCBjbGllbnRz DQpUaXZvbGkgU3RvcmFnZSBNYW5hZ2VyIFY1LjMgYmFja3VwIGNsaWVudHMNClRpdm9saSBTdG9y YWdlIE1hbmFnZXIgVjUuNCBiYWNrdXAgY2xpZW50cw0KDQotLSBUaXBwaW5nUG9pbnQoVE0pIElQ UyBDdXN0b21lciBQcm90ZWN0aW9uOg0KVGlwcGluZ1BvaW50IElQUyBjdXN0b21lcnMgaGF2ZSBi ZWVuIHByb3RlY3RlZCBhZ2FpbnN0IHRoaXMNCnZ1bG5lcmFiaWxpdHkgc2luY2UgU2VwdGVtYmVy IDI0LCAyMDA3IGJ5IERpZ2l0YWwgVmFjY2luZSBwcm90ZWN0aW9uDQpmaWx0ZXIgSUQgNTM1MS4g Rm9yIGZ1cnRoZXIgcHJvZHVjdCBpbmZvcm1hdGlvbiBvbiB0aGUgVGlwcGluZ1BvaW50IElQUzoN Cg0KICAgIGh0dHA6Ly93d3cudGlwcGluZ3BvaW50LmNvbSANCg0KLS0gVnVsbmVyYWJpbGl0eSBE ZXRhaWxzOg0KVGhpcyB2dWxuZXJhYmlsaXR5IGFsbG93cyByZW1vdGUgYXR0YWNrZXJzIHRvIGV4 ZWN1dGUgYXJiaXRyYXJ5IGNvZGUgb24NCnZ1bG5lcmFibGUgaW5zdGFsbGF0aW9ucyBvZiBJQk0g VGl2b2xpIFN0b3JhZ2UgTWFuYWdlciBFeHByZXNzLg0KQXV0aGVudGljYXRpb24gaXMgbm90IHJl cXVpcmVkIHRvIGV4cGxvaXQgdGhpcyB2dWxuZXJhYmlsaXR5Lg0KDQpUaGUgc3BlY2lmaWMgZmxh dyBleGlzdHMgaW4gdGhlIGRzbWNhZC5leGUgcHJvY2VzcyBib3VuZCBieSBkZWZhdWx0IG9uDQpU Q1AgcG9ydCAxNTgxLiBEdXJpbmcgSFRUUCBoZWFkZXIgcGFyc2luZywgYSBob3N0IHBhcmFtZXRl ciBvZg0Kc3VmZmljaWVudCBsZW5ndGggd2lsbCB0cmlnZ2VyIGFuIG92ZXJmbG93IHRocm91Z2gg YSBjYWxsIHRvDQp2c3dwcmludGYoKS4gVGhlIGNhbGwgb3ZlcmZsb3dzIGludG8gaW1wb3J0ZWQg ZnVuY3Rpb24gcG9pbnRlcnMgd2hpY2gNCmFyZSBsYXRlciBjYWxsZWQuIEV4cGxvaXRhdGlvbiBv ZiB0aGlzIGlzc3VlIGNhbiByZXN1bHQgaW4gYXJiaXRyYXJ5DQpjb2RlIGV4ZWN1dGlvbi4NCg0K LS0gVmVuZG9yIFJlc3BvbnNlOg0KSUJNIGhhcyBpc3N1ZWQgYW4gdXBkYXRlIHRvIGNvcnJlY3Qg dGhpcyB2dWxuZXJhYmlsaXR5LiBNb3JlIGRldGFpbHMgY2FuDQpiZSBmb3VuZCBhdDoNCg0KaHR0 cDovL3d3dy0xLmlibS5jb20vc3VwcG9ydC9kb2N2aWV3Lndzcz91aWQ9c3dnMjEyNjg3NzUNCg0K LS0gRGlzY2xvc3VyZSBUaW1lbGluZToNCjIwMDcuMDUuMjIgLSBWdWxuZXJhYmlsaXR5IHJlcG9y dGVkIHRvIHZlbmRvcg0KMjAwNy4wOS4yNCAtIERpZ2l0YWwgVmFjY2luZSByZWxlYXNlZCB0byBU aXBwaW5nUG9pbnQgY3VzdG9tZXJzDQoyMDA3LjA5LjI0IC0gQ29vcmRpbmF0ZWQgcHVibGljIHJl bGVhc2Ugb2YgYWR2aXNvcnkNCg0KLS0gQ3JlZGl0Og0KVGhpcyB2dWxuZXJhYmlsaXR5IHdhcyBk aXNjb3ZlcmVkIGJ5IFNlYmFzdGlhbiBBcGVsdA0KKHdlYm1hc3RlckBidXp6d29ybGQub3JnKS4N Cg0KLS0gQWJvdXQgdGhlIFplcm8gRGF5IEluaXRpYXRpdmUgKFpESSk6DQpFc3RhYmxpc2hlZCBi eSBUaXBwaW5nUG9pbnQsIGEgZGl2aXNpb24gb2YgM0NvbSwgVGhlIFplcm8gRGF5IEluaXRpYXRp dmUNCihaREkpIHJlcHJlc2VudHMgYSBiZXN0LW9mLWJyZWVkIG1vZGVsIGZvciByZXdhcmRpbmcg c2VjdXJpdHkNCnJlc2VhcmNoZXJzIGZvciByZXNwb25zaWJseSBkaXNjbG9zaW5nIGRpc2NvdmVy ZWQgdnVsbmVyYWJpbGl0aWVzLg0KDQpSZXNlYXJjaGVycyBpbnRlcmVzdGVkIGluIGdldHRpbmcg cGFpZCBmb3IgdGhlaXIgc2VjdXJpdHkgcmVzZWFyY2gNCnRocm91Z2ggdGhlIFpESSBjYW4gZmlu ZCBtb3JlIGluZm9ybWF0aW9uIGFuZCBzaWduLXVwIGF0Og0KDQogICAgaHR0cDovL3d3dy56ZXJv ZGF5aW5pdGlhdGl2ZS5jb20NCg0KVGhlIFpESSBpcyB1bmlxdWUgaW4gaG93IHRoZSBhY3F1aXJl ZCB2dWxuZXJhYmlsaXR5IGluZm9ybWF0aW9uIGlzIHVzZWQuDQozQ29tIGRvZXMgbm90IHJlLXNl bGwgdGhlIHZ1bG5lcmFiaWxpdHkgZGV0YWlscyBvciBhbnkgZXhwbG9pdCBjb2RlLg0KSW5zdGVh ZCwgdXBvbiBub3RpZnlpbmcgdGhlIGFmZmVjdGVkIHByb2R1Y3QgdmVuZG9yLCAzQ29tIHByb3Zp ZGVzIGl0cw0KY3VzdG9tZXJzIHdpdGggemVybyBkYXkgcHJvdGVjdGlvbiB0aHJvdWdoIGl0cyBp bnRydXNpb24gcHJldmVudGlvbg0KdGVjaG5vbG9neS4gRXhwbGljaXQgZGV0YWlscyByZWdhcmRp bmcgdGhlIHNwZWNpZmljcyBvZiB0aGUNCnZ1bG5lcmFiaWxpdHkgYXJlIG5vdCBleHBvc2VkIHRv IGFueSBwYXJ0aWVzIHVudGlsIGFuIG9mZmljaWFsIHZlbmRvcg0KcGF0Y2ggaXMgcHVibGljbHkg YXZhaWxhYmxlLiBGdXJ0aGVybW9yZSwgd2l0aCB0aGUgYWx0cnVpc3RpYyBhaW0gb2YNCmhlbHBp bmcgdG8gc2VjdXJlIGEgYnJvYWRlciB1c2VyIGJhc2UsIDNDb20gcHJvdmlkZXMgdGhpcyB2dWxu ZXJhYmlsaXR5DQppbmZvcm1hdGlvbiBjb25maWRlbnRpYWxseSB0byBzZWN1cml0eSB2ZW5kb3Jz IChpbmNsdWRpbmcgY29tcGV0aXRvcnMpDQp3aG8gaGF2ZSBhIHZ1bG5lcmFiaWxpdHkgcHJvdGVj dGlvbiBvciBtaXRpZ2F0aW9uIHByb2R1Y3QuDQoNCg0KQ09ORklERU5USUFMSVRZIE5PVElDRTog VGhpcyBlLW1haWwgbWVzc2FnZSwgaW5jbHVkaW5nIGFueSBhdHRhY2htZW50cywNCmlzIGJlaW5n IHNlbnQgYnkgM0NvbSBmb3IgdGhlIHNvbGUgdXNlIG9mIHRoZSBpbnRlbmRlZCByZWNpcGllbnQo cykgYW5kDQptYXkgY29udGFpbiBjb25maWRlbnRpYWwsIHByb3ByaWV0YXJ5IGFuZC9vciBwcml2 aWxlZ2VkIGluZm9ybWF0aW9uLg0KQW55IHVuYXV0aG9yaXplZCByZXZpZXcsIHVzZSwgZGlzY2xv c3VyZSBhbmQvb3IgZGlzdHJpYnV0aW9uIGJ5IGFueSANCnJlY2lwaWVudCBpcyBwcm9oaWJpdGVk LiAgSWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlDQpkZWxldGUg YW5kL29yIGRlc3Ryb3kgYWxsIGNvcGllcyBvZiB0aGlzIG1lc3NhZ2UgcmVnYXJkbGVzcyBvZiBm b3JtIGFuZA0KYW55IGluY2x1ZGVkIGF0dGFjaG1lbnRzIGFuZCBub3RpZnkgM0NvbSBpbW1lZGlh dGVseSBieSBjb250YWN0aW5nIHRoZQ0Kc2VuZGVyIHZpYSByZXBseSBlLW1haWwgb3IgZm9yd2Fy ZGluZyB0byAzQ29tIGF0IHBvc3RtYXN0ZXJAM2NvbS5jb20uIA0K