CVE Feed

    Dashboard / CVE / CVE-2008-0247

    CVE-2008-0247

    Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 before 5.3.7.3 allows remote attackers to execute arbitrary code via a packet with a large length value.

    Published:Jan 12, 2008
    Last Modified:Apr 23, 2026
    EPS:Jan 12, 2008
    EPSS Score:0.3603
    CVSS Score:10

    Affected Products

    Vendor
    Ibm
    Product
    Tivoli Storage Manager Express

    Exploits

    No exploit reference

    References

    http://secunia.com/advisories/28440
    http://www-1.ibm.com/support/docview.wss?uid=swg21291536
    http://www.securityfocus.com/archive/1/486270/100/0/threaded
    http://www.securityfocus.com/bid/27235
    http://www.securitytracker.com/id?1019182
    http://www.vupen.com/english/advisories/2008/0106
    http://www.zerodayinitiative.com/advisories/ZDI-08-001.html
    https://exchange.xforce.ibmcloud.com/vulnerabilities/39604
    http://secunia.com/advisories/28440
    http://www-1.ibm.com/support/docview.wss?uid=swg21291536
    http://www.securityfocus.com/archive/1/486270/100/0/threaded
    http://www.securityfocus.com/bid/27235
    http://www.securitytracker.com/id?1019182
    http://www.vupen.com/english/advisories/2008/0106
    http://www.zerodayinitiative.com/advisories/ZDI-08-001.html
    https://exchange.xforce.ibmcloud.com/vulnerabilities/39604

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High