Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

CVE-2015-1896: IBM Tivoli Storage Manager FastBack 6.1 allows remote code execution

CVE-2015-1896 · published 11 years ago

Summary

The FastBack component of IBM Tivoli Storage Manager version 6.1 (earlier than 6.1.11.1) can be tricked into running unauthorized programs. An attacker on the network could use this weakness to take control of the server hosting the backup software. Update to version 6.1.11.1 or later, or apply the vendor’s security patch, to close the gap.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software

Vendor	Product	Affected versions
ibm	tivoli_storage_manager_fastback	6.1.0.1 6.1.1.0 6.1.7.2 6.1.8.0 6.1.8.1 6.1.9.0 6.1.9.1 6.1.10.0 6.1.10.1 6.1.11.0 `cpe:2.3:a:ibm:tivoli_storage_manager_fastback:6.1.0.1:::::::*`

Original advisory text

Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows remote attackers to execute arbitrary code via unspecified vectors.

References

http://www-01.ibm.com/support/docview.wss?uid=swg21700536 Patch Vendor Advisory
http://www.securityfocus.com/bid/74024 Third Party Advisory VDB Entry
https://www.verisign.com/en_US/security-services/security-intelligence/vulnerabi... Third Party Advisory VDB Entry

Fix within

Internet-facing 3 days

Internal 60 days

Not known to be exploited
Can be exploited automatically (estimated)
Gives an attacker full control (estimated)

Severity

10.0 Critical

Exploitation

31% chance of attack within 30 days

Type

CWE-119Buffer Overflow

Timeline

Published25 May 2015

Updated29 Sep 2026

First seen29 Sep 2026

Sources

CVE-2015-1896 · NVD

Track software like this

Free during beta