CVE-2010-3756

The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service (daemon crash) by sending data over TCP.  NOTE: this might overlap CVE-2010-3060.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:N/I:N/A:P
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 71%
VendorProductVersion
ibmtivoli_storage_manager_fastback
5.5.0
ibmtivoli_storage_manager_fastback
5.5.1
ibmtivoli_storage_manager_fastback
5.5.2
ibmtivoli_storage_manager_fastback
5.5.2.0
ibmtivoli_storage_manager_fastback
5.5.3.0
ibmtivoli_storage_manager_fastback
5.5.4.0
ibmtivoli_storage_manager_fastback
5.5.5.0
ibmtivoli_storage_manager_fastback
5.5.6.0
ibmtivoli_storage_manager_fastback
6.1.0.0
ibmtivoli_storage_manager_fastback
6.1.0.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
http://www.ibm.com/support/docview.wss?uid=swg21443820
http://www.securityfocus.com/archive/1/514070/100/0/threaded
http://zerodayinitiative.com/advisories/ZDI-10-186/
http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883
http://www.ibm.com/support/docview.wss?uid=swg21443820
http://www.securityfocus.com/archive/1/514070/100/0/threaded
http://zerodayinitiative.com/advisories/ZDI-10-186/