Design/Logic Flaw

Unspecified vulnerability in the server in IBM Tivoli Storage Manager TSM 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and attack vectors related to the "admin command line."...

CVE-2009-1178

Technical details about CVE-2009-1178 are not publicly provided in the supplied sources; no concrete impact, vector, or remediation is documented here. Monitor for updates.

CVE-2004-2762

The CVE refers to IBM Tivoli Storage Manager (TSM) server on multiple tracks: 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1. When the HTTP communication method is enabled, remote attackers can cause a ...

CVE-2003-1570

The server in IBM Tivoli Storage Manager TSM 5.1.x, 5.2.x before 5.2.1.2, and 6.x before 6.1 does not require credentials to observe the server console in some circumstances, which allows remote authenticated administrators to monitor server operations by establishing a console mode session,...

CVE-2009-1178

Unspecified vulnerability in the server in IBM Tivoli Storage Manager TSM 5.3.x before 5.3.2 and 6.x before 6.1 has unknown impact and attack vectors related to the "admin command line."...

CVE-2003-1570

The CVE-2003-1570 issue affects IBM Tivoli Storage Manager (TSM) server versions 5.1.x, 5.2.x prior to 5.2.1.2, and 6.x prior to 6.1. The vulnerability allows remote authenticated administrators to observe the server console without requiring credentials in certain circumstances, effectively expo...

CVE-2004-2762

The server in IBM Tivoli Storage Manager TSM 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service daemon...

IBM Tivoli Storage Manager Express Backup Heap Corruption (CVE-2008-4563)

The IBM Tivoli Storage Manager TSM is a product used for storing backups and archiving data. A buffer overflow vulnerability has been identified in IBM Tivoli Storage Manager.The vulnerability is due to an error in the TSM service that fails to sufficiently validate user supplied values in a...

IBM Tivoli存储管理器远程堆溢出漏洞

BUGTRAQ ID: 34077 CVECAN ID: CVE-2008-4563 Tivoli Storage Manager是一种遵循ANSI SAN标准的可扩展解决方案，用于发现、监控和管理企业SAN架构组件，并可分配和自动操纵企业的附加磁盘存储资源。 Tivoli存储管理器dsmsvc.exe守护程序的adsmdll.dll库存在堆溢出漏洞。有漏洞的函数分配了固定大小的堆缓冲区用于存储会话相关数据，然后将用户提供的值用作了拷贝操作的字节长度。由于缺少边界检查，未经认证的远程攻击者可以通过提交恶意请求触发堆溢出，导致拒绝服务或执行任意代码。 IBM Tivoli Storage...

IBM Tivoli Storage Manager < 5.4.4.1 Overflow

Binary data 4959.prm...

Tivoli Storage Manager heap corruption

Added: 03/12/2009 CVE: CVE-2008-4563 BID: 34077 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. Problem A heap overflow allows remote attackers to execute arbitrary commands. Resolution Apply the workaround or solution...

Tivoli Storage Manager heap corruption

Added: 03/12/2009 CVE: CVE-2008-4563 BID: 34077 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. Problem A heap overflow allows remote attackers to execute arbitrary commands. Resolution Apply the workaround or solution...

Tivoli Storage Manager heap corruption

Added: 03/12/2009 CVE: CVE-2008-4563 BID: 34077 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. Problem A heap overflow allows remote attackers to execute arbitrary commands. Resolution Apply the workaround or solution...

Tivoli Storage Manager heap corruption

Added: 03/12/2009 CVE: CVE-2008-4563 BID: 34077 Background IBM Tivoli Storage Manager TSM provides centralized management for automated backup and restoration operations. Problem A heap overflow allows remote attackers to execute arbitrary commands. Resolution Apply the workaround or solution...

CVE-2008-4563

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon dsmsvc.exe in the backup server in IBM Tivoli Storage Manager TSM Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted...

CVE-2008-4563

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon dsmsvc.exe in the backup server in IBM Tivoli Storage Manager TSM Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted...

Heap overflow

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon dsmsvc.exe in the backup server in IBM Tivoli Storage Manager TSM Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted...

CVE-2008-4563

CVE-2008-4563 is a heap-based buffer overflow in adsmdll.dll 5.3.7.7296 used by the dsmsvc.exe daemon in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier, and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0. A remote attacker can exploit a crafted length value to execute arbi...

CVE-2008-4563

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon dsmsvc.exe in the backup server in IBM Tivoli Storage Manager TSM Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted...

IBM Tivoli Storage Manager HSM Client < 5.5.1.8 / 5.4.2.6

The remote host is running a version of IBM Tivoli Storage Manager HSM Client that is earlier than 5.4.2.6 / 5.5.1.8. Such versions are reportedly affected by a remote buffer overflow vulnerability. An attacker could exploit this to run arbitrary code with the permissions of the affected...