{"id":"CVE-2008-4563","aliases":["EUVD-2008-4544","GHSA-pxfc-8f3m-gmg5"],"status":"published","title":"Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the...","description":"Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.28987,"percentile":0.98173,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-119"],"published":"2009-03-11T14:00:00Z","modified":"2026-06-16T22:58:04Z","products":[{"vendor":"ibm","product":"tivoli_storage_manager"},{"vendor":"ibm","product":"tivoli_storage_manager_express"}],"references":[{"url":"http://www.securityfocus.com/bid/34077","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://securitytracker.com/id?1021837","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www-01.ibm.com/support/docview.wss?uid=swg21377388","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.vupen.com/english/advisories/2009/0669","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","Vendor Advisory"]},{"url":"http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"]},{"url":"http://secunia.com/advisories/34245","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://osvdb.org/52617","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/49188","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-4563"},{"url":"https://github.com/advisories/GHSA-pxfc-8f3m-gmg5"}],"sources":{"cve":[{"id":"CVE-2008-4563","description":"Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.","status":"published","published":"2009-03-11T14:00:00Z","modified":"2024-08-07T10:24:19.002Z","updated_at":"2026-11-02T14:34:46.950176Z"}],"euvd":[{"id":"EUVD-2008-4544","description":"Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.","status":"published","published":"2009-03-11T14:00:00Z","modified":"2024-08-07T10:24:19Z","updated_at":"2026-11-03T01:38:47.367971Z"}],"ghsa":[{"id":"GHSA-pxfc-8f3m-gmg5","title":"Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the...","description":"Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.","status":"published","published":"2022-05-02T00:11:21Z","modified":"2023-01-31T05:06:58Z","cwes":["CWE-119"],"updated_at":"2026-11-02T14:49:07.796746Z"}],"nvd":[{"id":"CVE-2008-4563","description":"Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.","status":"published","published":"2009-03-11T14:19:15.187Z","modified":"2026-06-16T22:58:04.817Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-119"],"updated_at":"2026-11-02T14:01:31.451035Z"}]}}