Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CVE-2008-4801

EPSS 28.11% · P97
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2008-4801

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.0.0 through 5.2.5.2, 5.3.0.0 through 5.3.6.1, 5.4.0.0 through 5.4.2.2, and 5.5.0.0 through 5.5.0.91 in IBM Tivoli Storage Manager (TSM); and the Backup-Archive client in TSM Express; allows remote attackers to execute arbitrary code by sending a large amount of crafted data to a TCP port.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
IBM 'dsmcat.exe' Tivoli存储管理器客户端远程堆溢出漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Tivoli Storage Manager是一种遵循ANSI SAN标准的可扩展解决方案，用于发现、监控和管理企业SAN架构组件，并可分配和自动操纵企业的附加磁盘存储资源。 IBM Tivoli存储管理器Backup-Archive客户端的Data Protection for SQL CAD服务(dsmcat.exe)存在堆溢出漏洞。该进程默认监听于大于1024的TCP端口上，错误的信任了用户提供的大小值，将指定数量的数据拷贝到了静态的堆缓冲区。远程攻击者向该服务发送了特制报文，触发堆溢出，导致以SY
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2008-4801

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2008-4801

请登录查看更多情报信息。

Same Patch Batch · n/a · 2008-10-30 · 12 CVEs total

CVE-2008-4799netpbm pamperspective模块数字错误漏洞
CVE-2008-4800Microsoft DebugDiag 'CrashHangExt.dll' ActiveX控件拒绝服务漏洞
CVE-2008-4794Opera Web浏览器历史搜索跨站脚本漏洞
CVE-2008-4795Opera Web浏览器JavaScript URL链接跨站脚本漏洞
CVE-2008-4796Snoopy _httpsrequest()模块Shell命令执行漏洞
CVE-2008-4797Arihiro Kurata Kantan WEB Server 目录遍历漏洞
CVE-2008-4798WebGUI 'Asset.pm' Perl模块处理代码执行漏洞
CVE-2007-5394Adobe PageMaker PMD文件处理缓冲区溢出漏洞
CVE-2007-6021Adobe PageMaker PMD文件处理缓冲区溢出漏洞
CVE-2008-2237OpenOffice WMF文件解析堆溢出漏洞
CVE-2008-2238OpenOffice EMF文件RMD字段堆溢出漏洞

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2008-4801

No comments yet

Leave a comment