10

CVE-2008-0401

Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an HTTP request with a long method string to port 443/tcp.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 8.38% 0.943
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=647
http://secunia.com/advisories/28604
Vendor Advisory
http://www-1.ibm.com/support/docview.wss?uid=swg24018010
Patch
http://www.kb.cert.org/vuls/id/158609
US Government Resource
http://www.securityfocus.com/bid/27387
http://www.securitytracker.com/id?1019249
http://www.vupen.com/english/advisories/2008/0239
https://exchange.xforce.ibmcloud.com/vulnerabilities/39819