IBM Tivoli Monitoring multiple services buffer overflow
| tivoli-monitoring-multiple-bo (33746) |  High Risk |
Description:
IBM Tivoli Monitoring is vulnerable to multiple heap-based buffer overflows, caused by improper bounds checking by Tivoli Universal Agent Primary Service, Monitoring Agent for Windows OS - Primary, and Tivoli Enterprise Portal Server services. By sending an overly long string to the 10110/TCP, 6014/TCP, and 14206/TCP ports respectively, a remote attacker could overflow a buffer and execute arbitrary code on the system.
Platforms Affected:
- IBM, Tivoli Monitoring Express 6.1.0
Remedy:
Upgrade to the latest IBM Tivoli Monitoring version 6.1.0 Fix Pack 2 (6.1.0-TIV-ITM-FP0002 or later), available from IBM Support & downloads Web site. See References.
Consequences:
Gain Access
References:
- IBM Software Web site, Tivoli Monitoring at http://www-306.ibm.com/software/tivoli/products/monitor/.
- IBM Support & downloads, IBM Tivoli Monitoring Version 6.1.0 Fix Pack 2 (6.1.0-TIV-ITM-FP0002) at http://www-1.ibm.com/support/docview.wss?uid=swg24012341.
- ZDI-07-018, IBM Tivoli Monitoring Express Universal Agent Heap Overflow Vunlerability at http://www.zerodayinitiative.com/advisories/ZDI-07-018.html.
- BID-23558: IBM Tivoli Monitoring Express Universal Agent Multiple Heap Buffer Overflow Vulnerabilities
- CVE-2007-2137: Heap-based buffer overflow in kde.dll in IBM Tivoli Monitoring Express 6.1.0 before Fix Pack 2, as used in Tivoli Universal Agent, Windows OS Monitoring agent, and Enterprise Portal Server, allows remote attackers to execute arbitrary code by sending a long string to a certain TCP port.
- SA24938: IBM Tivoli Monitoring Various Services Buffer Overflow Vulnerabilities
- SECTRACK ID: 1017933: IBM Tivoli Monitoring Express Heap Overflow in Universal Agent Lets Remote Users Execute Arbitrary Code
- VUPEN/ADV-2007-1456: IBM Tivoli Monitoring Multiple Service Buffer Overflow and Code Execution Vulnerabilities
Reported:
Apr 18, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net