The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x prior to 5.1.9.1, 5.1.x prior to 5.1.10, 5.2.2.x prior to 5.2.2.3, 5.2.x prior to 5.2.3, 5.3.x prior to 5.3.0, and 6.x prior to 6.1, when the HTTP communication method is enabled, allows remote malicious users to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ibm tivoli_storage_manager 4.2 |
||
ibm tivoli_storage_manager 4.2.1 |
||
ibm tivoli_storage_manager 4.2.2 |
||
ibm tivoli_storage_manager 4.2.3 |
||
ibm tivoli_storage_manager 4.2.4 |
||
ibm tivoli storage manager 5.1.9 |
||
ibm tivoli storage manager 5.1.0 |
||
ibm tivoli storage manager 5.2.1 |
||
ibm tivoli storage manager 5.2.0 |
||
ibm tivoli storage manager 5.1.1 |
||
ibm tivoli storage manager 5.1.5 |
||
ibm tivoli storage manager 5.3 |
||
ibm tivoli storage manager 6.0 |
||
ibm tivoli storage manager 5.1.6 |
||
ibm tivoli storage manager 5.1.7 |
||
ibm tivoli storage manager 5.1.8 |
||
ibm tivoli storage manager 5.2.2 |
Vulmon