iDefense Security Advisory 01.22.08 – Remote exploitation of a buffer overflow vulnerability in the web server component of IBM Corp.’s Tivoli Provisioning Manager for OS Deployment allows attackers to cause a denial of service condition or potentially execute arbitrary code with SYSTEM privileges. This vulnerability specifically exists within the logging functionality of the web server component. By making requests with a large HTTP request method, an attacker can cause a static-sized buffer to be overrun with data they supplied. iDefense has confirmed the existence of this vulnerability in IBM Tivoli Provisioning Manager for OS Deployment version 5.1.0.3. Previous versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/62984/01.22.08-1.txt
Source: https://packetstormsecurity.com/files/62984/iDEFENSE-Security-Advisory-2008-01-22.1.html