CVE-2007-3268 : The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1

The TFTP implementation in IBM Tivoli Provisioning Manager for OS Deployment 5.1 before Fix Pack 3 allows remote attackers to cause a denial of service (rembo.exe crash and multiple service outage) via a read (RRQ) request with an invalid blksize (blocksize), which triggers a divide-by-zero error.

Published 2007-07-18 23:30:00

Updated 2025-04-09 00:30:58

Source MITRE

View at NVD, CVE.org

Vulnerability category: Denial of service

Products affected by CVE-2007-3268

IBM » Tivoli Provisioning Manager Os Deployment » Version: 5.1.0.2
cpe:2.3:a:ibm:tivoli_provisioning_manager_os_deployment:5.1.0.2:*:*:*:*:*:*:*
Matching versions

Exploit prediction scoring system (EPSS) score for CVE-2007-3268

EPSS FAQ

3.22%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 86 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2007-3268

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.0	MEDIUM	AV:N/AC:L/Au:N/C:N/I:N/A:P	10.0	2.9	NIST
Access Vector: Network Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
7.5	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H	3.9	3.6	NIST	2024-02-02
Attack Vector: Network Attack Complexity: Low Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE ids for CVE-2007-3268

CWE-369 Divide By Zero

The product divides a value by zero.

Assigned by: nvd@nist.gov (Primary)

References for CVE-2007-3268

http://securitytracker.com/id?1018401

GoDaddy Domain Name Search
Broken Link;Third Party Advisory;VDB Entry
http://www-1.ibm.com/support/docview.wss?uid=swg24016347

IBM notice: The page you requested cannot be displayed
Broken Link;Patch
http://www.vupen.com/english/advisories/2007/2560

Webmail: access your OVH emails on ovhcloud.com | OVHcloud
Broken Link
http://secunia.com/advisories/26093

About Secunia Research | Flexera
Broken Link;Patch;Vendor Advisory
http://www.securityfocus.com/bid/24942

Broken Link;Third Party Advisory;VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/35468

IBM Tivoli Provisioning Manager for OS Deployment rembo.exe denial of service CVE-2007-3268 Vulnerability Report
VDB Entry;Vendor Advisory
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=560

Broken Link;Vendor Advisory
http://www3.software.ibm.com/ibmdl/pub/software/tivoli_support/patches/patches_5.1.0/5.1.0-TIV-TPMOSD-FP0003/5.1.0-TIV-TPMOSD-FP0003.README.HTM

Patch

Jump to

Vulnerability Details : CVE-2007-3268

Products affected by CVE-2007-3268

Exploit prediction scoring system (EPSS) score for CVE-2007-3268

CVSS scores for CVE-2007-3268

CWE ids for CVE-2007-3268

References for CVE-2007-3268