Vulnerability Details CVE-2002-1011
Buffer overflow in web server for Tivoli Management Framework (TMF) Endpoint 3.6.x through 3.7.1, before Fixpack 2, allows remote attackers to cause a denial of service or execute arbitrary code via a long HTTP GET request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.025
EPSS Ranking 84.7%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0023.html
- http://online.securityfocus.com/archive/1/282292
- http://www.iss.net/security_center/static/9555.php
- http://www.securityfocus.com/bid/5235
- http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html
- http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0023.html
- http://online.securityfocus.com/archive/1/282292
- http://www.iss.net/security_center/static/9555.php
- http://www.securityfocus.com/bid/5235
- http://www.tivoli.com/secure/support/documents/security/mgt-fwk-http-vul.html
Products affected by CVE-2002-1011
-
cpe:2.3:a:ibm:tivoli_management_framework:3.6
-
cpe:2.3:a:ibm:tivoli_management_framework:3.6.1
-
cpe:2.3:a:ibm:tivoli_management_framework:3.7
-
cpe:2.3:a:ibm:tivoli_management_framework:3.7.1