CVE-2010-3760
Last modified
CVE-2010-3760 is a vulnerability of currently unknown severity. FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash, and recovery failure) by specifying a large size value within TCP packet data. NOTE: this might overlap CVE-2010-3061.. EPSS estimates a 2.54% chance of exploitation in the next 30 days.
Description
FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash, and recovery failure) by specifying a large size value within TCP packet data. NOTE: this might overlap CVE-2010-3061.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Ibm | Tivoli Storage Manager Fastback | 5.5.0 |
| Ibm | Tivoli Storage Manager Fastback | 5.5.1 |
| Ibm | Tivoli Storage Manager Fastback | 5.5.2 |
| Ibm | Tivoli Storage Manager Fastback | 5.5.2.0 |
| Ibm | Tivoli Storage Manager Fastback | 5.5.3.0 |
| Ibm | Tivoli Storage Manager Fastback | 5.5.4.0 |
| Ibm | Tivoli Storage Manager Fastback | 5.5.5.0 |
| Ibm | Tivoli Storage Manager Fastback | 5.5.6.0 |
| Ibm | Tivoli Storage Manager Fastback | 6.1.0.0 |
| Ibm | Tivoli Storage Manager Fastback | 6.1.0.1 |
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21443820Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC69883Vendor Advisory
- http://www.ibm.com/support/docview.wss?uid=swg21443820Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-3760?
How severe is CVE-2010-3760?
How do I fix CVE-2010-3760?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-3754The FXCLI_OraBR_Exec_Command function in FastBackServer.exe …
- CVE-2010-3755The _DAS_ReadBlockReply function in FastBackServer.exe in th…
- CVE-2010-3756The _CalcHashValueWithLength function in FastBackServer.exe …
- CVE-2010-3757Format string vulnerability in the _Eventlog function in Fas…
- CVE-2010-3758Multiple stack-based buffer overflows in FastBackServer.exe …
- CVE-2010-3759FastBackMount.exe in the Mount service in IBM Tivoli Storage…
- CVE-2010-3761Unspecified vulnerability in IBM Tivoli Storage Manager (TSM…
- CVE-2010-3762ISC BIND before 9.7.2-P2, when DNSSEC validation is enabled,…
- CVE-2010-3763Cross-site scripting (XSS) vulnerability in core/summary_api…
- CVE-2010-3764The Old Charts implementation in Bugzilla 2.12 through 3.2.8…
- CVE-2010-3765Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.1…9.8
- CVE-2010-3766Use-after-free vulnerability in Mozilla Firefox before 3.5.1…
Are you affected by CVE-2010-3760?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST