IBM Security Bulletin: IBM Tivoli Storage Manager FastBack Stack-Based Buffer Overflow Elevation of Privilege Vulnerability (CVE-2016-6091)

The IBM Tivoli Storage Manager FastBack mount process is vulnerable to a stack-based buffer overflow. A local or remote attacker could overflow a buffer and execute arbitrary code on the system with root privileges or cause the application to crash.

CVE(s): CVE-2016-6091

Affected product(s) and affected version(s):

IBM Tivoli Storage Manager FastBack 6.1.0 through 6.1.11.0.
IBM Tivoli Storage Manager FastBack 5.5 all levels.

Refer to the following reference URLs for remediation and additional vulnerability details:
Source Bulletin: http://ift.tt/2fn2l7j
X-Force Database: http://ift.tt/2ggc12G

from IBM Product Security Incident Response Team http://ift.tt/2fmYCGw