Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2006-5855

EPSS 68.19% · P99
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2006-5855

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM Tivoli Storage Manager多个远程缓冲区溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Tivoli Storage Manager是一种遵循ANSI SAN标准的可扩展解决方案，用于发现、监控和管理企业SAN架构组件，并可分配和自动操纵企业的附加磁盘存储资源。 Tivoli Storage Manager服务在处理发送到TCP/1500端口的消息时存在多个内存访问拷贝漏洞，远程攻击者可能利用这些漏洞导致服务崩溃或执行任意指令。 能够触发漏洞的消息格式为[index][size]，其中index字段指定了到消息体特定字段的整数偏移，size字段指定了index字段的大小。由于没有验证inde
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2006-5855

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2006-5855

请登录查看更多情报信息。

Same Patch Batch · n/a · 2006-12-06 · 17 CVEs total

CVE-2006-6112LifeType 'class/和plugins/' 安全信息泄露漏洞
CVE-2006-6305Net-SNMP权限许可和访问控制漏洞
CVE-2006-6333Linux内核＇IBMTR.C＇远程拒绝服务漏洞
CVE-2006-6328TorrentFlux 'index.php'目录遍历漏洞
CVE-2006-6329TorrentFlux 'index.php'delfile参数文件删除漏洞
CVE-2006-6330TorrentFlux 'index.php'kill参数任意命令执行漏洞
CVE-2006-6331TorrentFlux 'metalnfo.php'任意命令执行漏洞
CVE-2006-5994Microsoft Word畸形字符串远程代码执行漏洞
CVE-2006-6308Symantec LiveState Agent 'shstart.exe'进程安全权限提升漏洞
CVE-2006-6309IBM Tivoli Storage Manager 多个数组索引错误
CVE-2006-6310Microsoft Internet Explorer Frame Src属性拒绝服务漏洞
CVE-2006-6311Internet Explorer CSS畸形宽度单元标记拒绝服务漏洞
CVE-2006-5856Adobe下载管理器畸形条目信息缓冲区溢出漏洞
CVE-2006-6301DenyHosts　sshd日志文件远程拒绝服务漏洞
CVE-2006-6302Fail2Ban 'hosts.deny'文件远程拒绝服务漏洞
CVE-2006-6303Yukihiro Matsumoto Ruby 'cgi.rb'库远程拒绝服务漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2006-5855

No comments yet

Leave a comment