Areca Raid Storage Manager Default Admin Credentials (HTTP)

The remote Areca Raid Storage Manager web interface is using known default credentials. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

IBM Tivoli Storage Manager Client 6.3.1.x < 6.3.2.0 / 6.4.x < 6.4.1.0 ReFS Insecure File Permissions

The version of Tivoli Storage Manager Client installed on the remote Windows host is potentially affected by an issue in which file permissions are not preserved when files residing on a Resilient File System ReFS are backed up or restored. Note that the SKIPNTSECURITYPERMISSIONS option must be s...

CVE-2013-5371

The client in IBM Tivoli Storage Manager TSM 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System ReFS files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations...

Design/Logic Flaw

The client in IBM Tivoli Storage Manager TSM 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System ReFS files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations...

CVE-2013-5371

CVE-2013-5371 affects IBM Tivoli Storage Manager Client on Windows (TSM 6.3.1.x and 6.4.0) where ReFS file permissions are not preserved during backup/restore, allowing local users to bypass access restrictions via standard filesystem operations. Connected sources specify affected versions as 6.3...

CVE-2013-5371

The client in IBM Tivoli Storage Manager TSM 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System ReFS files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations...

PT-2014-2919

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM versions 6.3.1 through 6.4.0 Description The issue concerns the client in IBM Tivoli Storage Manager TSM on Windows, where it fails to preserve permissions of Resilient File System ReFS files during backup and...

CVE-2013-5371: Undefined Security Weakness

The client in IBM Tivoli Storage Manager TSM 6.3.1 and 6.4.0 on Windows does not preserve permissions of Resilient File System ReFS files across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations...

KLA10211 SB vulnerability in IBM Tivoli Storage Manager

An improper permissions vulnerability was found in IBM Tivoli Storage Manager. By exploiting this vulnerability malicious users can bypass access restrictions. This vulnerability can be exploited locally via standard file operations. Original advisories - Exploitation Related products...

CVE-2012-5944: IBM Tivoli Storage Manager privilege escalation

IBM Tivoli Storage Manager server is affected by CVE-2012-5944, enabling a local attacker to access data from other users on the same node in multi-user setups. Affected server releases include 5.4, 5.5.0–5.5.6.x, 6.1.0–6.1.5.2xx, 6.2.0–6.2.4.xxx, 6.3.0–6.3.3.xxx; 7.1 is unaffected. Root cause: u...

IBM Tivoli Storage Manager Client Local Buffer Overrun

The version of IBM Tivoli Storage Manager Client installed on the remote Linux host is potentially affected by a local buffer overrun vulnerability. A local attacker could exploit this vulnerability to gain unauthorized root access. C Tenable Network Security, Inc. include"compat.inc"; if...

CVE-2013-2964

Buffer overflow in dsmtca in IBM Tivoli Storage Manager TSM through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors...

Buffer overflow

Buffer overflow in dsmtca in IBM Tivoli Storage Manager TSM through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors...

CVE-2013-2964

CVE-2013-2964 describes a local buffer overflow in the IBM Tivoli Storage Manager (TSM) client component dsmtca on UNIX/Linux, affecting versions 5.5.4.0, 6.1.0–6.1.5.4, 6.2.0–6.2.4.7, and 6.3.0–6.3.0.17. The vulnerability enables local users to gain privileges via unspecified vectors (local priv...

CVE-2013-2964: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in dsmtca in IBM Tivoli Storage Manager TSM through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors...

PT-2013-4066

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM versions 5.5.4.0 and earlier IBM Tivoli Storage Manager TSM versions 6.1.0 through 6.1.5.4 IBM Tivoli Storage Manager TSM versions 6.2.0 through 6.2.4.7 IBM Tivoli Storage Manager TSM versions 6.3.0 through...

CVE-2013-0472

The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...

CVE-2013-0471

The traditional scheduler in the client in IBM Tivoli Storage Manager TSM before 6.2.5.0, 6.3 before 6.3.1.0, and 6.4 before 6.4.0.1, when Prompted mode is enabled, allows remote attackers to cause a denial of service scheduling outage via unspecified vectors...

Code injection

The traditional scheduler in the client in IBM Tivoli Storage Manager TSM before 6.2.5.0, 6.3 before 6.3.1.0, and 6.4 before 6.4.0.1, when Prompted mode is enabled, allows remote attackers to cause a denial of service scheduling outage via unspecified vectors...

Design/Logic Flaw

The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...