CVE-2013-0509

Published: Jun 5, 2013Modified: Apr 29, 2026

7.6

Vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Exploitability: 4.9 / Impact: 10.0

Source: NVD

Description

Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 allows remote attackers to execute arbitrary code via a SQL transaction with a long table name that is not properly handled by a packet decoder.

Affected (2)

Products: Ibm: Tivoli Netcool Application Service Monitors, Tivoli Netcool System Service Monitors

2 products

Tivoli Netcool Application Service Monitors

Tivoli Netcool System Service Monitors

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Netcool Application Service Monitors	Version 4.0.0
Ibm Tivoli Netcool System Service Monitors	Version 4.0.0

Related CWEs

Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

References (4)

http://www-01.ibm.com/support/docview.wss?uid=swg21638183

Source: psirt@us.ibm.com

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/82334

Source: psirt@us.ibm.com

http://www-01.ibm.com/support/docview.wss?uid=swg21638183

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/82334

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.