CVEvulnerability
CVE-2016-2946
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2016-12-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Stack-based buffer overflow in the ax Shared Libraries in the Agent in IBM Tivoli Monitoring (ITM) 6.2.2 before FP9, 6.2.3 before FP5, and 6.3.0 before FP2 on Linux and UNIX allows local users to gain privileges via unspecified vectors.
Affected configurations
• ibm tivoli monitoring 6.2.2
• ibm tivoli monitoring 6.2.2.1
• ibm tivoli monitoring 6.2.2.2
• ibm tivoli monitoring 6.2.2.3
• ibm tivoli monitoring 6.2.2.4
• ibm tivoli monitoring 6.2.2.5
• ibm tivoli monitoring 6.2.2.6
• ibm tivoli monitoring 6.2.2.7
• ibm tivoli monitoring 6.2.2.8
• ibm tivoli monitoring 6.2.2.9
• ibm tivoli monitoring 6.2.3
• ibm tivoli monitoring 6.3.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845 Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21984578 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92389 Third Party Advisory, VDB Entry
- http://www-01.ibm.com/support/docview.wss?uid=swg1IV85845 Broken Link
- http://www-01.ibm.com/support/docview.wss?uid=swg21984578 Patch, Vendor Advisory
- http://www.securityfocus.com/bid/92389 Third Party Advisory, VDB Entry