Some vulnerabilities have been reported in IBM Tivoli Monitoring, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerabilities are caused due to boundary errors within the Tivoli Universal Agent Primary Service, Monitoring Agent for Windows OS - Primary, and Tivoli Enterprise Portal Server services. These can be exploited to cause a heap-based buffer overflow via sending an overly long string to any of the said services via ports 10110/TCP, 6014/TCP, and 14206/TCP, respectively.

Successful exploitation allows execution of arbitrary code.

The vulnerability is reported in version 6.1. Other versions may also be affected.

Solution
Apply Fix Pack 2.
Further details available to Secunia VIM customers

Provided and/or discovered by
Discovered by CIRT.DK and reported via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM:
http://www-1.ibm.com/support/docview.wss?uid=swg24012341

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-07-018.html

CIRT.DK:
http://cirt.dk/advisories/cirt-52-advisory.txt

Deep Links
Links available to Secunia VIM customers