CVE-2008-0401

no score yetEPSS 8.4%

Buffer overflow in the logging functionality of the HTTP server in IBM Tivoli Provisioning Manager for OS Deployment (TPMfOSD) before 5.1.0.3 Interim Fix 3 allows remote attackers to cause a denial of service (daemon crash) or possibly execute arbitrary code via an HTTP request with a long method string to port 443/tcp.

EPSS: 8.4% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2008-01-23
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

ibm:tivoli_provisioning_manager_os_deployment

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=647
http://secunia.com/advisories/28604
http://www-1.ibm.com/support/docview.wss?uid=swg24018010
http://www.kb.cert.org/vuls/id/158609
http://www.securityfocus.com/bid/27387

Check your stack JSON