Is CVE-2008-4801 actively exploited?

CVE-2008-4801 has no public evidence of in-the-wild exploitation as of 2026-04-23.

What is the CVSS score for CVE-2008-4801?

CVE-2008-4801 has a CVSS score of 10 (UNKNOWN severity). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.

How do I patch CVE-2008-4801?

Patch guidance is available from ibm security advisories. CVEDatabase generates AI-assisted remediation guidance on demand for CVE-2008-4801.

CVE-2008-4801 - remediation guidance & executive summary

Q: Which products are affected by CVE-2008-4801?

6 products: ibm tivoli storage manager client, ibm tivoli storage manager client, ibm tivoli storage manager client, ibm tivoli storage manager client, ibm tivoli storage manager client, and 1 more.

Description

Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.0.0 through 5.2.5.2, 5.3.0.0 through 5.3.6.1, 5.4.0.0 through 5.4.2.2, and 5.5.0.0 through 5.5.0.91 in IBM Tivoli Storage Manager (TSM); and the Backup-Archive client in TSM Express; allows remote attackers to execute arbitrary code by sending a large amount of crafted data to a TCP port.

CVSS Metrics

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Access Vector: network
Access Cmplx: low
Auth: none
Confidentiality: complete
Integrity: complete
Availability: complete
Weaknesses: CWE-119 · Memory Buffer Errors

Metadata

Primary Vendor: IBM
Published: 10/31/2008
Last Modified: 4/23/2026
Source: NIST NVD
Note: Verify all details with official vendor sources before applying patches.

Affected Products

ibm : tivoli_storage_manager_clientibm : tivoli_storage_manager_clientibm : tivoli_storage_manager_clientibm : tivoli_storage_manager_clientibm : tivoli_storage_manager_clientibm : tivoli_storage_manager_express

Remediation Guidance

Executive Summary

View on NIST NVD