Secunia

Some vulnerabilities have been reported in IBM Tivoli Provisioning Manager for OS Deployment, which can be exploited by malicious people to cause a DoS (Denial of Service) or to compromise a vulnerable system.

1) Errors within the management service when handling multipart/form-data in HTTP POST requests can be exploited to crash the service or cause a heap corruption via specially crafted HTTP POST requests to ports 443/TCP and 8080/TCP of the management service.

2) Boundary errors within the rembo.exe service when processing HTTP requests can be exploited to cause stack-based buffer overflows via specially crafted requests with an overly long (greater than 150 bytes) filename, Host, or Authorization field sent to default port 8080/TCP.

Successful exploitation allows execution of arbitrary code.

The vulnerabilities are reported in version 5.1.0.116. Other versions may also be affected.

Solution
Apply fix pack 5.1.0-TIV-TPMOSD-IF0002.
Further details available in Customer Area

Provided and/or discovered by
1) Discovered by an anonymous person and reported via iDefense Labs.
2) Aaron Portnoy, TippingPoint Security Research Team

Changelog
Further details available in Customer Area

Original Advisory
iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=498

TippingPoint Security Research Team:
http://dvlabs.tippingpoint.com/advisory/TPTI-07-05

Deep Links
Links available in Customer Area