CVE-2012-5944: IBM Tivoli Storage Manager privilege escalation

IBM Tivoli Storage Manager server is affected by CVE-2012-5944, enabling a local attacker to access data from other users on the same node in multi-user setups. Affected server releases include 5.4, 5.5.0–5.5.6.x, 6.1.0–6.1.5.2xx, 6.2.0–6.2.4.xxx, 6.3.0–6.3.3.xxx; 7.1 is unaffected. Root cause: u...

IBM Tivoli Storage Manager Client Local Buffer Overrun

The version of IBM Tivoli Storage Manager Client installed on the remote Linux host is potentially affected by a local buffer overrun vulnerability. A local attacker could exploit this vulnerability to gain unauthorized root access. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2013-2964

Buffer overflow in dsmtca in IBM Tivoli Storage Manager TSM through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors...

Buffer overflow

Buffer overflow in dsmtca in IBM Tivoli Storage Manager TSM through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors...

CVE-2013-2964

CVE-2013-2964 describes a local buffer overflow in the IBM Tivoli Storage Manager (TSM) client component dsmtca on UNIX/Linux, affecting versions 5.5.4.0, 6.1.0–6.1.5.4, 6.2.0–6.2.4.7, and 6.3.0–6.3.0.17. The vulnerability enables local users to gain privileges via unspecified vectors (local priv...

CVE-2013-0472

The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...

CVE-2013-0471

The traditional scheduler in the client in IBM Tivoli Storage Manager TSM before 6.2.5.0, 6.3 before 6.3.1.0, and 6.4 before 6.4.0.1, when Prompted mode is enabled, allows remote attackers to cause a denial of service scheduling outage via unspecified vectors...

Design/Logic Flaw

The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...

Code injection

The traditional scheduler in the client in IBM Tivoli Storage Manager TSM before 6.2.5.0, 6.3 before 6.3.1.0, and 6.4 before 6.4.0.1, when Prompted mode is enabled, allows remote attackers to cause a denial of service scheduling outage via unspecified vectors...

CVE-2013-0472

The vulnerability CVE-2013-0472 affects IBM Tivoli Storage Manager Client Web GUI in TS M Client versions 6.3.x before 6.3.1.0 and 6.4.x before 6.4.0.1, enabling unauthorized access to the TSM server via the Web GUI (vector: network). IBM lists affected products/versions and provides fixes: 6.3 →...

CVE-2013-0471

The IBM Tivoli Storage Manager (TSM) client traditional scheduler is affected by CVE-2013-0471 when in Prompted mode, allowing remote denial-of-service (scheduling outage). Affected are TSM Client versions before 6.2.5.0, before 6.3.1.0, and before 6.4.0.1 (i.e., 6.2.0–6.2.4.x, 6.3.0.x, and 6.4.0...

CVE-2013-0472

The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...

CVE-2013-0471

The traditional scheduler in the client in IBM Tivoli Storage Manager TSM before 6.2.5.0, 6.3 before 6.3.1.0, and 6.4 before 6.4.0.1, when Prompted mode is enabled, allows remote attackers to cause a denial of service scheduling outage via unspecified vectors...

IBM Spectrum Protect / Tivoli Storage Manager Client Installed

IBM Spectrum Protect Client, formerly known as Tivoli Storage Manager Client, a client for Tivoli Storage Manager, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid64567; scriptversion"1.11";...

IBM Tivoli Storage Manager Client 6.3 < 6.3.1.0 / 6.4 < 6.4.0.1 Unauthorized Access

The version of Tivoli Storage Manager Client installed on the remote Windows host is potentially affected by a vulnerability in the TSM client Web GUI which allows unauthorized access from the local network to files stored on the TSM server. C Tenable Network Security, Inc. include"compat.inc"; i...

IBM Tivoli Storage Manager Client Denial of Service

The version of Tivoli Storage Manager Client installed on the remote Windows host is potentially affected by a denial of service vulnerability in the TSM client traditional scheduler which allows a remote attacker to disable the traditional scheduler when it is in Prompted mode. C Tenable Network...

SolarWinds Storage Manager 5.1.2 SQL Injection

SQL Injection vulnerability in SolarWinds Storage Manager LoginServlet Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

CVE-2012-5954

Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management aka TSM HSM before 6.2.5.0 and 6.3.x before 6.3.1.0 allows remote attackers to read or modify HSM-managed file system objects via unknown vectors...

CVE-2012-4859

Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management aka TSM HSM before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown vectors...

Code injection

Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management aka TSM HSM before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown vectors...