CVE-2013-0508

Severity: high (CVSS 7.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-06-05 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 and 4.0.1 before FP1 allow context-dependent attackers to execute arbitrary code or cause a denial of service via a long line in (1) hrfstable.idx, (2) hrdevice.idx, (3) hrstorage.idx, or (4) lotusmapfile in the SSM Config directory, or (5) .manifest.hive in the main agent directory.

Affected products

IBM Tivoli Netcool Application Service Monitors: 4.0.0, 4.0.1
IBM Tivoli Netcool System Service Monitors: 4.0.0, 4.0.1

References

http://www-01.ibm.com/support/docview.wss?uid=swg21638459
https://exchange.xforce.ibmcloud.com/vulnerabilities/82333
http://www-01.ibm.com/support/docview.wss?uid=swg21638459
https://exchange.xforce.ibmcloud.com/vulnerabilities/82333

Get alerted when CVE-2013-0508 or the next vulnerability affects your stack