Vulnerability Description
The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to write to arbitrary files, and subsequently execute these files, via a crafted TCP packet to an unspecified port.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Tivoli Storage Manager Fastback | 6.1.0.0 |
Related Weaknesses (CWE)
References
- http://www-01.ibm.com/support/docview.wss?uid=swg21959398Vendor Advisory
- http://www.securityfocus.com/bid/75450
- http://www.securitytracker.com/id/1032773
- http://www.zerodayinitiative.com/advisories/ZDI-15-269
- http://www-01.ibm.com/support/docview.wss?uid=swg21959398Vendor Advisory
- http://www.securityfocus.com/bid/75450
- http://www.securitytracker.com/id/1032773
- http://www.zerodayinitiative.com/advisories/ZDI-15-269
FAQ
What is CVE-2015-1942?
CVE-2015-1942 is a vulnerability with a CVSS score of 9.3 (HIGH). The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to write to arbitrary files, and subsequently execute these files, via a crafted TCP packet to an unspecifie...
How severe is CVE-2015-1942?
CVE-2015-1942 has been rated HIGH with a CVSS base score of 9.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2015-1942?
Check the references section above for vendor advisories and patch information. Affected products include: Ibm Tivoli Storage Manager Fastback.