CVEvulnerability

CVE-2007-1868

10.0 HIGH Published 2007-04-04 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2007-04-04
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

The management service in IBM Tivoli Provisioning Manager for OS Deployment before 5.1 Fix Pack 2 does not properly handle multipart/form-data in HTTP POST requests, which allows remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via crafted POST requests to port 8080/tcp or 443/tcp.

Affected configurations

• ibm tivoli provisioning manager os deployment 5.1.0.116

References