Description
IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. By placing a specially-crafted DLL in the victim's path, an attacker could exploit this vulnerability when the installer is executed to run arbitrary code on the system with privileges of the victim.
Metrics
CVSS 3.0 7.3/10
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:HWeakness enumeration
Affected software
| Vendor | Product | Versions |
|---|---|---|
| IBM Corporation | Tivoli Storage Manager FastBack | 5.5; 6.1; 5.5.0; 5.5.1; 5.5.2; 5.5.2.0; 5.5.3.0; 5.5.4.0; 5.5.5.0; 5.5.6.0; 6.1.0.0; 6.1.0.1; 3.5.604; 3.5.705; 3.5.801; 3.5.802; 3.5.804; 5.5.7; 6.1.1.0; unspecified |
References
- http://www.ibm.com/support/docview.wss?uid=swg21988908Vendor Advisory
- http://www.securityfocus.com/bid/92614Third Party Advisory, VDB Entry
- http://www.ibm.com/support/docview.wss?uid=swg21988908Vendor Advisory
- http://www.securityfocus.com/bid/92614Third Party Advisory, VDB Entry
Timeline
- Published
- Feb 8, 2017
- Last modified
- Jun 17, 2026
- NVD status
- Modified