VULNERABILITY INTELLIGENCE
CVE-2010-3756
CVSS score5 MEDIUM
EPSS probability1.40%
CISA KEVNot currently listed
Published2010-10-05
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:N/A:P
Description
The _CalcHashValueWithLength function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly validate an unspecified length value, which allows remote attackers to cause a denial of service (daemon crash) by sending data over TCP. NOTE: this might overlap CVE-2010-3060.
Weakness classification
- CWE-20: Improper Input Validation