CVE-2010-3756: IBM Tivoli Storage Manager Fastback

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service (daemon crash) by sending data over TCP. NOTE: this might overlap CVE-2010-3060.

Affected products

• IBM Tivoli Storage Manager Fastback: version 5.5.0 only; version 5.5.1 only; version 5.5.2 only; version 5.5.2.0 only; version 5.5.3.0 only; version 5.5.4.0 only; …

Published 2010-10-05. Last modified 2026-06-16.