A vulnerability has been reported in IBM Cognos TM1, which can be exploited by malicious people to potentially compromise a vulnerable system.

The vulnerability is caused due to a boundary error in the Admin Server component (tm1admsd.exe) when handling requests with certain opcodes and can be exploited to cause a stack-based buffer overflow by sending a crafted request to TCP port 5498.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions 9.4.1 and 9.5.x prior to 9.5.2 FP2.

Solution
Apply interim fixes.
Further details available to Secunia VIM customers

Provided and/or discovered by
An anonymous person via ZDI.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM:
http://www.ibm.com/support/docview.wss?uid=swg24032164
http://www.ibm.com/support/docview.wss?uid=swg24032165
http://www.ibm.com/support/docview.wss?uid=swg24032166
http://www.ibm.com/support/docview.wss?uid=swg21590314

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-12-101/

Deep Links
Links available to Secunia VIM customers