The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to write to arbitrary files, and subsequently execute these files, via a crafted TCP packet to an unspecified port.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1942
Reference (s):
- BID:75450
- URL: http://www.securityfocus.com/bid/75450
- http://www-01.ibm.com/support/docview.wss?uid=swg21959398
- http://www.zerodayinitiative.com/advisories/ZDI-15-269
- SECTRACK:1032773