Design/Logic Flaw

The server in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename...

CVE-2014-4817

The server in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename...

CVE-2014-4817

Summary: CVE-2014-4817 affects IBM Tivoli Storage Manager (TSM) server components. The vulnerability applies to TSM Server versions 5.x and 6.x prior to 6.3.5.10 and 7.x prior to 7.1.1.100, where a certain backup option combined with a filename that matches a previously used filename can allow re...

SolarWinds Storage Manager AuthenticationFilter Authentication Bypass

An authentication bypass vulnerability exists in SolarWinds Storage Manager. The vulnerability is due to a flaw within the AuthenticationFilter class. A remote unauthenticated attacker could exploit this vulnerability by bypassing the authentication filter and uploading malicious scripts to the...

SolarWinds Storage Manager Authentication Bypass

No description provided by source. This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 Msf::Exploit::Remote Rank = ExcellentRanking include Msf::Exploit::Remote::HttpClient include...

SolarWinds Storage Manager AuthenticationFilter RCE Vulnerability

SolarWinds Storage Manager is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SolarWinds Storage Manager - Authentication Bypass (Metasploit)

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'SolarWinds Storage Manager Authentication Bypass', 'Description' = %q This module exploits an authentication bypass vulnerability in...

SolarWinds Storage Manager Authentication Bypass Exploit

This Metasploit module exploits an authentication bypass vulnerability in Solarwinds Storage Manager. The vulnerability exists in the AuthenticationFilter, which allows to bypass authentication with specially crafted URLs. After bypassing authentication, is possible to use a file upload function ...

IBM Tivoli Storage Manager Client 6.2.x < 6.2.5.2 / 6.3.x < 6.3.2 / 6.4 < 6.4.1.3 Local Buffer DoS

The version of Tivoli Storage Manager Client installed on the remote Windows host is affected by a denial of service vulnerability. There is an unspecified overflow condition within the Java GUI configuration wizard and the Preferences Editor. This issue allows a local attacker to cause a denial ...

IBM Tivoli Storage Manager Client Metadata Local File Access Information Disclosure

The version of Tivoli Storage Manager Client installed on the remote Linux host is affected by an unauthorized file access vulnerability. A flaw exists with the Tivoli Backup-Archive client when restoring Space Management file metadata. A local attacker can exploit this flaw to gain access to the...

SolarWinds Storage Resource Monitor / SolarWinds Storage Manager Detection (credentialed check)

Binary data solarwindsstoragemanagerinstalled.nbin...

SolarWinds Storage Manager < 5.7.2 Remote Code Execution

The remote host is running a version of SolarWinds Storage Manager prior to 5.7.2. It is, therefore, affected by a remote code execution vulnerability due to a flaw in the 'AuthenticationFilter' class. A remote, unauthenticated attacker can exploit this vulnerability to upload malicious scripts...

CVE-2013-6335

The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...

Design/Logic Flaw

The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...

CVE-2013-6335

IBM TSM Backup-Archive client for Space Management (Linux/AIX) versions 5.x–7.1.x do not preserve file permissions during backup/restore, potentially allowing local users to bypass access restrictions. Affected releases include 7.1.0.0–0.0.2, 6.4.x, 6.3.x, 6.2.x, 6.1.x, and 5.4–5.5; remediation i...

CVE-2013-6335

The Backup-Archive client in IBM Tivoli Storage Manager TSM for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and...

CVE-2014-0876

Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service application crash o...

Buffer overflow

Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service application crash o...

CVE-2014-0876

Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service application crash o...

CVE-2014-0876

CVE-2014-0876 affects IBM Tivoli Storage Manager (TSM) Backup-Archive client on Windows and macOS. The issue is a local buffer overrun in the Java GUI Configuration Wizard and Preferences Editor, leading to denial of service (crash or hang). Affected releases include TSM client 5.x and 6.x, with ...