VIR Vulnerability Intelligence Relay

CVE-2013-0509

high
Published 2013-06-05 · Modified 2026-04-29
CVSS v3
—
CVSS v2
7.6
VIR risk
7.6

Description

Buffer overflow in the Transaction MIB agent in IBM Tivoli Netcool System Service Monitors (SSM) and Application Service Monitors (ASM) 4.0.0 before FP14 allows remote attackers to execute arbitrary code via a SQL transaction with a long table name that is not properly handled by a packet decoder.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21638183

Application impact
VendorProductVersionsFixed
ibm ibmtivoli_netcool_application_service_monitors4.0.0
ibm ibmtivoli_netcool_system_service_monitors4.0.0

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.