ibm tivoli storage manager 6.1 vulnerabilities and exploits

(subscribe to this query)

Client Acceptor Daemon (CAD) in the client in IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 and 6.x prior to 6.3.2.5, 6.4 prior to 6.4.3.1, and 7.1 prior to 7.1.3 allows remote malicious users to cause a denial of service (daemon crash) via a crafted Web client URL.

Ibm Tivoli Storage Manager 6.4 Ibm Tivoli Storage Manager 6.3 Ibm Tivoli Storage Manager 6.2 Ibm Tivoli Storage Manager 6.1 Ibm Tivoli Storage Manager 5.5 Ibm Tivoli Storage Manager 7.1

dsmtca in the client in IBM Tivoli Storage Manager (TSM) 5.4.x, 5.5.x, 6.x prior to 6.4.3, and 7.1.x prior to 7.1.2 allows local users to discover the backup/restore encryption-key password via unspecified vectors.

Ibm Tivoli Storage Manager 6.3.5 Ibm Tivoli Storage Manager 6.4 Ibm Tivoli Storage Manager 6.4.1 Ibm Tivoli Storage Manager 6.4.2 Ibm Tivoli Storage Manager 7.1 Ibm Tivoli Storage Manager 6.3 Ibm Tivoli Storage Manager 6.3.4 Ibm Tivoli Storage Manager 5.4.0 Ibm Tivoli Storage Manager 5.5 Ibm Tivoli Storage Manager 6.1 Ibm Tivoli Storage Manager 6.2 Ibm Tivoli Storage Manager 6.3.3 Ibm Tivoli Storage Manager 7.1.1

IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read by a local user when a set password command is issued. IBM X-Force ID: 118472.

IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be obtained by a local user. IBM X-Force ID: 126875.

IBM Spectrum Protect 7.1 and 8.1 could allow a local malicious user to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to va...

IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries. As a result, an attacker is able to submit SQL queries that access database tables that are not intended for access or use by administrators. Th...

IBM Spectrum Protect (formerly Tivoli Storage Manager) 5.5 up to and including 6.3 prior to 6.3.2.6, 6.4 prior to 6.4.3.3, and 7.1 prior to 7.1.6 allows local users to obtain sensitive retrieved data from arbitrary accounts in opportunistic circumstances by leveraging previous us...

Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 prior to 5.3.6.7, 5.4 prior to 5.4.3, 5.5 prior to 5.5.2.2, and 6.1 prior to 6.1.0.2, and TSM Express 5.3.3.0 up to and including 5.3.6.6, allows remote...

1 EDB exploit

IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the password. A database administrator may be able to decrypt the IBM Spectrum protect client or administrator password which can result in information disclosure or a denial of ser...

The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information during authentication. An attacker could gain user or administrative access to the TSM server. IBM X-Forc...

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook