CVE-2007-3268: IBM Tivoli Provisioning Manager OS Deployment

High severity, CVSS 7.5. EPSS: 2.2% chance of exploitation in the next 30 days.

The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service (rembo.exe crash and multiple service outage) via a read (RRQ) request with an invalid blksize (blocksize), which triggers a divide-by-zero error.

Affected products

• IBM Tivoli Provisioning Manager OS Deployment: version 5.1.0.2 only

Published 2007-07-18. Last modified 2026-06-16.