ibm tivoli storage manager 5.4.3.0 vulnerabilities and exploits

(subscribe to this query)

The traditional scheduler in the client in IBM Tivoli Storage Manager (TSM) prior to 6.2.5.0, 6.3 prior to 6.3.1.0, and 6.4 prior to 6.4.0.1, when Prompted mode is enabled, allows remote malicious users to cause a denial of service (scheduling outage) via unspecified vectors.

The Web GUI in the client in IBM Tivoli Storage Manager (TSM) 6.3 prior to 6.3.1.0 and 6.4 prior to 6.4.0.1 allows man-in-the-middle malicious users to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors.

Buffer overflow in dsmtca in IBM Tivoli Storage Manager (TSM) up to and including 5.5.4.0, 6.1.0 up to and including 6.1.5.4, 6.2.0 up to and including 6.2.4.7, and 6.3.0 up to and including 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors.

The server in IBM Tivoli Storage Manager (TSM) 5.x and 6.x prior to 6.3.5.10 and 7.x prior to 7.1.1.100 allows remote malicious users to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a pre...

Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) prior to 5.4.3.4, 5.5.x prior to 5.5.3, 6.x prior to 6.1.4, and 6.2.x prior to 6.2.2 on Windows and AIX allows local users to gain privileges via unspecified...

Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Manager (TSM) prior to 5.4.3.4, 5.5.x prior to 5.5.3, 6.x prior to 6.1.4, and 6.2.x prior to 6.2.2 on Windows allows local users to gain privile...

Race condition in the client in IBM Tivoli Storage Manager (TSM) 5.4.0.0 up to and including 5.4.3.6, 5.5.0.0 up to and including 5.5.4.3, 6.1.0.0 up to and including 6.1.5.6, 6.2 prior to 6.2.5.4, 6.3 prior to 6.3.2.3, 6.4 prior to 6.4.2.1, and 7.1 prior to 7.1.1 on UNIX and Lin...

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook