CVE-2016-2946 — HIGH (7.8) — White Hats Nepal

Vulnerability Description

Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.

CVSS Score

7.8

HIGH

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Ibm	Tivoli Monitoring	6.2.2
Linux	Linux Kernel	-

Related Weaknesses (CWE)

CWE-119

References

http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21984578PatchVendor Advisory
http://www.securityfocus.com/bid/92389Third Party AdvisoryVDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg21984578PatchVendor Advisory
http://www.securityfocus.com/bid/92389Third Party AdvisoryVDB Entry

FAQ

What is CVE-2016-2946?

CVE-2016-2946 is a vulnerability with a CVSS score of 7.8 (HIGH). Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain...

How severe is CVE-2016-2946?

CVE-2016-2946 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2016-2946?

Check the references section above for vendor advisories and patch information. Affected products include: Ibm Tivoli Monitoring, Linux Linux Kernel.