CVE-2002-1011: IBM Tivoli Management Framework

High severity, CVSS 7.5. EPSS: 3.3% chance of exploitation in the next 30 days.

Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.

Affected products

• IBM Tivoli Management Framework: version 3.6 only; version 3.6.1 only; version 3.7 only; version 3.7.1 only

Published 2002-10-04. Last modified 2026-06-16.