CVE-2008-4828: ibm tivoli_storage_manager_client
Vulnerability summary
CVE-2008-4828 is a high (CVSS 10.0) vulnerability in ibm tivoli_storage_manager_client. EPSS estimates a 71.47% chance of exploitation in the next 30 days, higher than 99.4% of scored vulnerabilities. 2 public exploits are recorded.
Timeline
- 05-05-2009PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified "generic string handling function" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
71.47%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
No change 0.00 pp
From 71.47% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
2 foundIBM Tivoli Storage Manager Express RCA Service Buffer Overflow
exploit/windows/misc/ibm_tsm_rca_dicugetidentify
Maturity: weaponized
IBM Tivoli Storage Manager Express RCA Service - Remote Buffer Overflow (Metasploit)
Maturity: weaponized
Weaknesses
CWE · root causeAffected systems
Ibm2 products
- tivoli_storage_manager_client5.1 | 5.1.8.0 | 5.1.8.2 | 5.2 | 5.2.5.1 | 5.2.5.2 | 5.2.5.3 | 5.3 | 5.3.5.2 | 5.3.5.3 | 5.3.6.3 | 5.3.6.4 | 5.4 | 5.4.1.1 | 5.4.1.2 | 5.4.1.96
- tivoli_storage_manager_express5.3 | 5.3.3.0 | 5.3.6.4
1 vendor · 2 products