Design/Logic Flaw

dsmtca in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library loading, which allows local users to gain privileges via a crafted DSO file...

CVE-2014-6185

dsmtca in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library loading, which allows local users to gain privileges via a crafted DSO file...

CVE-2014-6185

IBM Tivoli Storage Manager Client (dsmtca) on Linux x86_64 is affected by CVE-2014-6185, enabling local privilege escalation via loading an attacker-supplied DSO. Affected TSM Client versions include 6.3.0.0–6.3.2.2, 6.4.0.0–6.4.2.1, and 7.1.0.0–7.1.1.3. Remediation/patch levels provided by IBM i...

CVE-2014-4813

CVE-2014-4813 affects IBM Tivoli Storage Manager UNIX and Linux clients. A race condition in the client could allow a local attacker to escalate privileges to root. Impact and affected versions are documented in IBM’s security bulletin, listing multiple TSM client branches (including 5.4.x, 5.5.x...

PT-2015-3780

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager versions 5.4.0.0 through 5.4.3.6 IBM Tivoli Storage Manager versions 5.5.0.0 through 5.5.4.3 IBM Tivoli Storage Manager versions 6.1.0.0 through 6.1.5.6 IBM Tivoli Storage Manager versions 6.2 before 6.2.5.4 IBM Tivo...

PT-2015-3830

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM versions 6.3 through 6.3.2.3 IBM Tivoli Storage Manager TSM versions 6.4 through 6.4.2.2 IBM Tivoli Storage Manager TSM versions 7.1 through 7.1.1.3 Description The issue is related to the dsmtca in the client,...

CVE-2014-4813: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in the client in IBM Tivoli Storage Manager TSM 5.4.0.0 through 5.4.3.6, 5.5.0.0 through 5.5.4.3, 6.1.0.0 through 6.1.5.6, 6.2 before 6.2.5.4, 6.3 before 6.3.2.3, 6.4 before 6.4.2.1, and 7.1 before 7.1.1 on UNIX and Linux allows local users to obtain root privileges via unspecified...

CVE-2014-6185: Undefined Security Weakness

dsmtca in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library loading, which allows local users to gain privileges via a crafted DSO file...

CVE-2015-1565

Cross-site scripting XSS vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers...

Cross site scripting

Cross-site scripting XSS vulnerability in the online help in Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager before 8.1.2-00, and Compute Systems Manager before 7.6.1-08 and 8.x before 8.1.2-00, as used in Hitachi Command Suite, allows remote attackers...

CVE-2015-1565

CVE-2015-1565 describes a cross-site scripting (XSS) vulnerability in the online help of Hitachi Command Suite components, specifically Hitachi Device Manager, Tiered Storage Manager, Replication Manager, and Global Link Manager (pre-8.1.2-00) and Compute Systems Manager (pre-7.6.1-08 and 8.x bef...

PT-2015-5354

Name of the Vulnerable Software and Affected Versions Hitachi Device Manager versions prior to 8.1.2-00 Hitachi Tiered Storage Manager versions prior to 8.1.2-00 Hitachi Replication Manager versions prior to 8.1.2-00 Hitachi Global Link Manager versions prior to 8.1.2-00 Hitachi Compute Systems...

IBM Tivoli Storage Manager Server 6.2 < 6.2.7 / 6.3 < 6.3.5 / 7.1 < 7.1.1 GSKit X.509 Certificate Chain DoS

The version of IBM Tivoli Storage Manager installed on the remote host is affected by a denial of service vulnerability. A remote attacker can exploit this issue via malformed X.509 certificate chain to cause the host to become unresponsive. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

Solarwinds-Storage-Manager-5.1.0

Exploit Title: Solarwinds Storage Manager 5.1.0 Remote SYSTEM SQL Injection Exploit Date: May 2nd 2012 Author: muts Version: SolarWinds Storage Manager 5.1.0 Tested on: Windows 2003 Archive Url : http://www.offensive-security.com/0day/solarshell.txt import urllib, urllib2, cookielib import sys...

Design/Logic Flaw

The server in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename...

CVE-2014-4817

The server in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename...

CVE-2014-4817

Summary: CVE-2014-4817 affects IBM Tivoli Storage Manager (TSM) server components. The vulnerability applies to TSM Server versions 5.x and 6.x prior to 6.3.5.10 and 7.x prior to 7.1.1.100, where a certain backup option combined with a filename that matches a previously used filename can allow re...

CVE-2014-4817

The server in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename...

PT-2014-6136

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM versions 5.x through 6.x before 6.3.5.10 IBM Tivoli Storage Manager TSM versions 7.x before 7.1.1.100 Description The issue allows remote attackers to bypass intended access restrictions and replace file backups ...

CVE-2014-4817: Undefined Security Weakness

The server in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename...