IBM.Tivoli.Monitoring.Express.Universal.Agent.Buffer.Overflow

Description

This indicates a possible exploit of a buffer overflow vulnerability in kde.dll in IBM Tivoli Monitoring Express.
This flaw is due to the application's failure to check the bounds of user supplied data before copying it into an insufficiently sized memory buffer.

Affected Products

IBM Tivoli Monitoring Express 6.1

Impact

The execution of arbitrary code on the system.

Recommended Actions

Upgrade to IBM Tivoli Monitoring version 6.1.0 Fix Pack 2 (6.1.0-TIV-ITM-FP0002) :
ftp://ftp.software.ibm.com/software/tivoli_support/patches/patches_6.1.0/6.1.0-TIV-ITM-FP0002/

References