A vulnerability has been reported in Tivoli Storage Manager Express, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to missing checks of an unspecified user supplied length value within the TSM Express Backup server (dsmsvc.exe, port 1500/TCP), which can be exploited to cause a heap-based buffer overflow by passing an overly large length value to the vulnerable service.

Successful exploitation may allow execution of arbitrary code with SYSTEM privileges.

The vulnerability is reported in Tivoli Storage Manager Express versions prior to 5.3.7.3.

Solution
Update to Tivoli Storage Manager Express version 5.3.7.3.
Further details available in Customer Area

Provided and/or discovered by
Independently discovered by Sebastian Apelt and Tenable Network Security, reported via ZDI.

Changelog
Further details available in Customer Area

Original Advisory
IBM:
http://www-1.ibm.com/support/docview.wss?uid=swg21291536

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-08-001.html

Deep Links
Links available in Customer Area