CVE-2017-1301: Improper Link Resolution Before File Access

IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacker could exploit this vulnerability by creating a symbolic link from a temporary file to various files on the...

PT-2017-12850

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue allows a local attacker to launch a symlink attack. This is possible because the IBM Spectrum Protect Backup-archive Client creates temporary files insecurely. A local attacke...

IBM Tivoli Storage Manager Backup-Archive client authentication bypass vulnerability

IBM Tivoli Storage Manager TSM is a suite of backup and recovery management solutions from IBM in the U.S. It supports data protection, space management and archiving, business recovery, and disaster recovery.IBM TSM Backup-Archive Client is one of the backup archive clients. A security...

PT-2015-3834 · Ibm · Domino +1

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager TSM Backup-Archive client versions 5.4 through 5.5 before 5.5.4.4 IBM Tivoli Storage Manager TSM Backup-Archive client versions 5.4.x and 5.5.x on Windows and z/OS IBM Tivoli Storage Manager TSM Backup-Archive clien...

CVE-2013-6335

The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...

CVE-2013-6335

IBM TSM Backup-Archive client for Space Management (Linux/AIX) versions 5.x–7.1.x do not preserve file permissions during backup/restore, potentially allowing local users to bypass access restrictions. Affected releases include 7.1.0.0–0.0.2, 6.4.x, 6.3.x, 6.2.x, 6.1.x, and 5.4–5.5; remediation i...

CVE-2014-0876: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service application crash o...

CVE-2011-1223: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the Alternate Data Stream aka ADS or named stream functionality in the backup-archive client in IBM Tivoli Storage Manager TSM before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before 6.2.2 on Windows allows local users to gain privileges via unspecified vectors...

PT-2011-2961

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM versions 5.4.3.4 and earlier, 5.5.x through 5.5.2, 6.x through 6.1.3, and 6.2.x through 6.2.1 Description The issue is related to a buffer overflow in the Alternate Data Stream functionality in the backup-archive...

Design/Logic Flaw

Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager TSM 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors...

CVE-2010-4605: Undefined Security Weakness

Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager TSM 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors...

Heap overflow

Heap-based buffer overflow in the Data Protection for SQL CAD service aka dsmcat.exe in the Client Acceptor Daemon CAD and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.0.0 through 5.2.5.2, 5.3.0.0 through 5.3.6.1, 5.4.0.0 through 5.4.2.2, and 5.5.0.0 through 5.5.0.91 in...

CVE-2008-4801: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the Data Protection for SQL CAD service aka dsmcat.exe in the Client Acceptor Daemon CAD and the scheduler in the Backup-Archive client 5.1.0.0 through 5.1.8.1, 5.2.0.0 through 5.2.5.2, 5.3.0.0 through 5.3.6.1, 5.4.0.0 through 5.4.2.2, and 5.5.0.0 through 5.5.0.91 in...