CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 10.0
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: ibm spectrum protect servers 7.1 and 8.1 and storage agents are vulnerable to a stack-based buffer overflow, caused by improper bounds checking by servers and storage agents in response to specifically crafted communication exchanges. by sending an overly long request, a remote attacker could overflow a buffer and execute arbitrary code on the system with instance id privileges or cause the server or storage agent to crash. ibm x-force id: 157510.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2019-07-02
Last Modified Date: 2019-10-09