CVE ID | CVE-2015-0120 |
CVSS SCORE | 9.3, AV:N/AC:M/Au:N/C:C/I:C/A:C |
AFFECTED VENDORS |
IBM |
AFFECTED PRODUCTS |
Tivoli Storage Manager FastBack |
TREND MICRO CUSTOMER PROTECTION | Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID ['19306']. For further product information on the TippingPoint IPS: http://www.tippingpoint.com |
VULNERABILITY DETAILS |
The specific flaw exists within the CRYPTO_S_EncryptBufferToBuffer function. By sending a specially crafted packet on TCP port 30051, an attacker is able to cause a stack buffer overflow. An attacker can use this to execute arbitrary code in the context of the SYSTEM.
|
ADDITIONAL DETAILS |
IBM has issued an update to correct this vulnerability. More details can be found at:
http://www-01.ibm.com/support/docview.wss?uid=swg21700549 |
DISCLOSURE TIMELINE |
|
CREDIT | AbdulAziz Hariri - HP Zero Day Initiative |