CVE-2015-8520

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2016-04-05 · updated 2026-06-17
Weakness: CWE-119

Description

Buffer overflow in the server in IBM Tivoli Storage Manager FastBack 5.5.x and 6.x before 6.1.12.2 allows remote attackers to execute arbitrary code via a crafted command, a different vulnerability than CVE-2015-8519, CVE-2015-8521, and CVE-2015-8522.

Affected products

IBM Corporation Tivoli Storage Manager FastBack: 5.5.0, 6.1.0, 6.1.0.1, 6.1.1, 6.1.1.0, 6.1.2 (+29)

References

http://www-01.ibm.com/support/docview.wss?uid=swg21975536
http://www.securityfocus.com/bid/84166
http://www-01.ibm.com/support/docview.wss?uid=swg21975536
http://www.securityfocus.com/bid/84166

Get alerted when CVE-2015-8520 or the next vulnerability affects your stack