ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow
From: [email protected]
To: [email protected], [email protected]
Subject: ZDI-08-001: IBM Tivoli Storage Manager Express Backup Server Heap Overflow
Vulnerability
MIME-Version: 1.0
X-Mailer: Lotus Notes Release 7.0.2 December 03, 2006
Message-ID: <OF349393E9.87C622BA-ON882573D0.006113F4-862573D0.00679A8F@3com.com.>
Sender: [email protected]
Date: Mon, 14 Jan 2008 12:51:37 -0600
X-MIMETrack: Serialize by Router on USUT001/US/3Com(Release 6.5.5FP2|October 23, 2006) at
01/14/2008 10:51:41 AM,
Serialize complete at 01/14/2008 10:51:41 AM
Content-Type: text/plain;
charset="US-ASCII"
Content-Transfer-Encoding: base64
X-Virus-Scanned: antivirus-gw at tyumen.ru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=
