IBM Tivoli Storage Manager Fastback vulnerabilities

48 CVEs affecting IBM Tivoli Storage Manager Fastback, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5934, published 2017-02-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2015-1896, published 2015-05-25. High severity, CVSS 10.0. EPSS: 31.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in the FastBackMount process in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.11.1 allows remote attackers to execute arbitrary code via unspecified vectors.
CVE-2015-1923, published 2015-06-30. High severity, CVSS 7.8. EPSS: 19.1% chance of exploitation in the next 30 days. Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
CVE-2015-1930, published 2015-06-30. High severity, CVSS 7.8. EPSS: 9.9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a…
CVE-2015-4935, published 2015-08-03. High severity, CVSS 10.0. EPSS: 9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability…
CVE-2015-4934, published 2015-08-03. High severity, CVSS 10.0. EPSS: 9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability…
CVE-2015-4933, published 2015-08-03. High severity, CVSS 10.0. EPSS: 9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability…
CVE-2015-4932, published 2015-08-03. High severity, CVSS 10.0. EPSS: 9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability…
CVE-2015-4931, published 2015-08-03. High severity, CVSS 10.0. EPSS: 9% chance of exploitation in the next 30 days. Stack-based buffer overflow in the server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12.1 allows remote attackers to execute arbitrary code via a crafted packet, a different vulnerability…
CVE-2015-1986, published 2015-06-30. High severity, CVSS 10.0. EPSS: 7.7% chance of exploitation in the next 30 days. The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2015-1938.
CVE-2010-3758, published 2010-10-05. High severity, CVSS 10.0. EPSS: 6.7% chance of exploitation in the next 30 days. Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to…

Latest

CVE-2016-5934, published 2017-02-08. High severity, CVSS 7.3. EPSS: 1% chance of exploitation in the next 30 days. IBM Tivoli Storage Manager FastBack installer could allow a remote attacker to execute arbitrary code on the system. By placing a specially-crafted DLL in the victim's path, an attacker could exploit…
CVE-2015-8523, published 2016-04-05. High severity, CVSS 7.5. EPSS: 1.5% chance of exploitation in the next 30 days. The server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to cause a denial of service (service crash) via crafted packets to a TCP port.
CVE-2015-8522, published 2016-04-05. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability…
CVE-2015-8521, published 2016-04-05. Critical severity, CVSS 9.8. EPSS: 2.8% chance of exploitation in the next 30 days. Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability…
CVE-2015-8520, published 2016-04-05. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability…
CVE-2015-8519, published 2016-04-05. Critical severity, CVSS 9.8. EPSS: 2.9% chance of exploitation in the next 30 days. Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability…
CVE-2016-0216, published 2016-02-29. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a…
CVE-2016-0213, published 2016-02-29. Critical severity, CVSS 9.8. EPSS: 2.4% chance of exploitation in the next 30 days. Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a…
CVE-2016-0212, published 2016-02-29. Critical severity, CVSS 9.8. EPSS: 2.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in IBM Tivoli Storage Manager FastBack 5.5 and 6.1.x through 6.1.11.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors, a…