CVE-2008-4563
Estado: ModificadaAlta (10)—
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Puntuación base: 10
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 29%
- Percentil entre todas las CVEs puntuadas: 98
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (2)
CWE
- CWE-119
Referencias
- http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775
- http://osvdb.org/52617
- http://secunia.com/advisories/34245
- http://securitytracker.com/id?1021837
- http://www-01.ibm.com/support/docview.wss?uid=swg21377388
- http://www.securityfocus.com/bid/34077
- http://www.vupen.com/english/advisories/2009/0669
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49188
- http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775
- http://osvdb.org/52617
- http://secunia.com/advisories/34245
- http://securitytracker.com/id?1021837
- http://www-01.ibm.com/support/docview.wss?uid=swg21377388
- http://www.securityfocus.com/bid/34077
- http://www.vupen.com/english/advisories/2009/0669
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49188
JSON original (NVD)
Mostrar
{
"id": "CVE-2008-4563",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 10,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "COMPLETE"
},
"acInsufInfo": false,
"impactScore": 10,
"baseSeverity": "HIGH",
"obtainAllPrivilege": true,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2009-03-11T14:19:15.187",
"references": [
{
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html",
"source": "cve@mitre.org"
},
{
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775",
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/52617",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/34245",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1021837",
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21377388",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/34077",
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2009/0669",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49188",
"source": "cve@mitre.org"
},
{
"url": "http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/52617",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/34245",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1021837",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg21377388",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/34077",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2009/0669",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/49188",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-119"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value."
},
{
"lang": "es",
"value": "Un desbordamiento del búfer en la región heap de la memoria en la biblioteca adsmdll.dll versión 5.3.7.7296, como es usada por el demonio (dsmsvc.exe) en el servidor de respaldo en Tivoli Storage Manager (TSM) Express de IBM versión 5.3.7.3 y anteriores y TSM versión 5.2, versiones 5.3 anteriores a 5.3.6.0 , y versiones 5.4.0.0 hasta 5.4.4.0, permite a los atacantes remotos ejecutar código arbitrario por medio de un valor de longitud diseñado."
}
],
"lastModified": "2026-06-16T22:58:04.817",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2CF61F35-5905-4BA9-AD7E-7DB261D2F256"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EA28A2C9-21A0-48E2-88DD-C2336D990523"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "801CCEC1-8DED-41C4-B6D2-38E4BEC74EA2"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A263333E-DB86-41BE-A508-731079429E62"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93FCB242-C35B-4CDB-AE62-3CA5D312586B"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70016926-5776-4A04-8D55-5CA12D1DA9B4"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "930B5AE2-CA47-47D7-96DE-F2B9F70337C8"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FAA5227-C1F5-48C1-A207-096F228E305E"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11E968D1-8198-4686-BFDD-8499CB435B56"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40A8E0C4-8509-4372-99C7-CFBA2100AEBE"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CBC191E-0CE6-4D9C-A75B-E3484AC3B4DE"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F956AF3F-0BDF-4F4B-AB29-418C39BEC8D5"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0642EDE5-7EBF-4FA3-9432-F82FE76EF9EB"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4C19266-CDED-4DC0-8B50-560BA3B5DAC4"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3BD18D39-DA8A-4C58-A18B-14EB6BEFBFDE"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F5E6A344-E062-4179-9CFA-CF912B4AED16"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A140293-8F4A-4AB4-9EE8-36D0EB398C66"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "AABAD076-C9D6-481E-B9DC-CEB95C224979"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3.7.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "77114204-172B-4E6A-AFFE-E6123458F0C3"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}