CVE-2010-4604

CVE-2010-4604 affects IBM Tivoli Storage Manager (TSM) backup-archive client, specifically the dsmtca GeneratePassword function. The stack-based buffer overflow allows local users to gain privileges by supplying a long LANG environment variable and sending a request over a pipe. Affected versions...

PT-2010-5570 · Ibm · Ibm Tivoli Storage Manager

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager TSM versions 5.3.x through 5.3.6.9 IBM Tivoli Storage Manager TSM versions 5.4.x through 5.4.3.3 IBM Tivoli Storage Manager TSM versions 5.5.x through 5.5.2.9 IBM Tivoli Storage Manager TSM versions 6.1.x through...

PT-2010-5572 · Ibm · Ibm Tivoli Storage Manager

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager TSM versions 5.4.x through 5.4.3.3 IBM Tivoli Storage Manager TSM versions 5.5.x through 5.5.2 IBM Tivoli Storage Manager TSM versions 6.1.x through 6.1.3 IBM Tivoli Storage Manager TSM versions 6.2.x through 6.2.1...

PT-2010-5571 · Ibm · Ibm Tivoli Storage Manager

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager versions 5.3.x through 5.3.6.9 IBM Tivoli Storage Manager versions 5.4.x through 5.4.3.3 IBM Tivoli Storage Manager versions 5.5.x through 5.5.2 IBM Tivoli Storage Manager versions 6.1.x through 6.1.3 IBM Tivoli...

IBM Tivoli Storage Manager (TSM) - Local Privilege Escalation

IBM Tivoli Storage Manager TSM - Local Privilege Escalation http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c ==-===-=====-=======-===========-=============-================= IBM Tivo...

Kryptos Logic Advisory: IBM Tivoli Storage Manager (TSM) Local Root

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c ==-===-=====-=======-===========-=============-================= IBM Tivoli Storage Manager TSM Local Root Kryptos Logic, December 20...

IBM Tivoli Storage Manager (TSM) Local Root

Exploit for linux platform in category local exploits ==-===-=====-=======-===========-=============-================= IBM Tivoli Storage Manager TSM Local Root Kryptos Logic, December 2010 ==-===-=====-=======-===========-=============-================= ===== Timeline Vendor Contacted..............

IBM Tivoli Storage Manager buffer overflow

Buffer overflow in suid root dsmtca backup client...

IBM Tivoli Storage Manager (TSM) - Local Privilege Escalation

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c ==-===-=====-=======-===========-=============-================= IBM Tivoli Storage Manager TSM Local Root Kryptos Logic, December 20...

IBM Tivoli Storage Manager FastBack Mount Service Code Execution

Added: 10/18/2010 CVE: CVE-2010-3058 BID: 42549 OSVDB: 67292 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. TSM includes FastBack, which provides a client/server backup solution for the MS Windows environment. FastBack...

IBM Tivoli Storage Manager FastBack Mount Service Code Execution

Added: 10/18/2010 CVE: CVE-2010-3058 BID: 42549 OSVDB: 67292 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. TSM includes FastBack, which provides a client/server backup solution for the MS Windows environment. FastBack...

IBM Tivoli Storage Manager FastBack Mount Service Code Execution

Added: 10/18/2010 CVE: CVE-2010-3058 BID: 42549 OSVDB: 67292 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. TSM includes FastBack, which provides a client/server backup solution for the MS Windows environment. FastBack...

Tivoli Storage Manager FastBack 0xfafbfcfd Packet Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Tivoli Storage Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within FastBackServer.exe which listens by default on TCP port 1320. When handling a...

IBM Tivoli Storage Manager FastBack Mount Service Code Execution (CVE-2010-3058)

The IBM Tivoli Storage Manager TSM is a product used for storing backups and archiving data. A remote code execution vulnerability has been reported in IBM Tivoli Storage Manager FastBack. The vulnerability is due to an arbitrary memory accessing in Fastback Mount Service FastBackMount.exe which...

CVE-2010-3757

Format string vulnerability in the Eventlog function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via format string specifiers located after a | pipe character i...

CVE-2010-3755

The DASReadBlockReply function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via data in a TCP packet. NOTE: this mig...

CVE-2010-3760

FastBackMount.exe in the Mount service in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 does not properly handle a certain failure to allocate memory, which allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash...

CVE-2010-3754

The FXCLIOraBRExecCommand function in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 uses values of packet fields to determine the content and length of data copied to memory, which allows remote attackers to execute...

CVE-2010-3758

Multiple stack-based buffer overflows in FastBackServer.exe in the Server in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allow remote attackers to execute arbitrary code via vectors involving the 1 AGISendToLog aka SendToLog function; the 2 group, 3...

CVE-2010-3761

Unspecified vulnerability in IBM Tivoli Storage Manager TSM FastBack 5.5.0.0 through 5.5.6.0 and 6.1.0.0 through 6.1.0.1 allows remote attackers to execute arbitrary code via unknown vectors, aka ZDI-CAN-700. NOTE: this might overlap CVE-2010-3058 or CVE-2010-3059...