PT-2014-3913

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM versions 5.x through 6.2.5.1 IBM Tivoli Storage Manager TSM versions 6.3.x through 6.3.1 IBM Tivoli Storage Manager TSM versions 6.4.x through 6.4.1 Description A buffer overflow issue exists in the Java GUI...

IBM Tivoli Storage Manager Express CAD Service Buffer Overflow

No description provided by source. $Id: ibmtsmcadping.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

CVE-2013-5371

CVE-2013-5371 affects IBM Tivoli Storage Manager Client on Windows (TSM 6.3.1.x and 6.4.0) where ReFS file permissions are not preserved during backup/restore, allowing local users to bypass access restrictions via standard filesystem operations. Connected sources specify affected versions as 6.3...

CVE-2013-2964

CVE-2013-2964 describes a local buffer overflow in the IBM Tivoli Storage Manager (TSM) client component dsmtca on UNIX/Linux, affecting versions 5.5.4.0, 6.1.0–6.1.5.4, 6.2.0–6.2.4.7, and 6.3.0–6.3.0.17. The vulnerability enables local users to gain privileges via unspecified vectors (local priv...

CVE-2013-2964: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in dsmtca in IBM Tivoli Storage Manager TSM through 5.5.4.0, 6.1.0 through 6.1.5.4, 6.2.0 through 6.2.4.7, and 6.3.0 through 6.3.0.17 on UNIX and Linux allows local users to gain privileges via unspecified vectors...

CVE-2013-0472

The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...

CVE-2013-0472

The vulnerability CVE-2013-0472 affects IBM Tivoli Storage Manager Client Web GUI in TS M Client versions 6.3.x before 6.3.1.0 and 6.4.x before 6.4.0.1, enabling unauthorized access to the TSM server via the Web GUI (vector: network). IBM lists affected products/versions and provides fixes: 6.3 →...

PT-2013-2365

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM versions prior to 6.2.5.0 IBM Tivoli Storage Manager TSM versions prior to 6.3.1.0 IBM Tivoli Storage Manager TSM versions prior to 6.4.0.1 Description The issue allows remote attackers to cause a denial of...

CVE-2013-0472: Undefined Security Weakness

The Web GUI in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.1.0 and 6.4 before 6.4.0.1 allows man-in-the-middle attackers to obtain unspecified client access, and consequently obtain unspecified server access, via unknown vectors...

CVE-2012-5954

CVE-2012-5954 affects IBM Tivoli Storage Manager for Space Management (TSM HSM). The issue allows a remote attacker to read or modify HSM-managed file system objects via unknown vectors in affected versions: HSM before 6.2.5.0 and 6.3.x before 6.3.1.0. IBM bulletin details remediation: upgrade to...

CVE-2012-4859

CVE-2012-4859 affects IBM Tivoli Storage Manager for Space Management (TSM HSM) up to 6.2.5.0 and 6.3.x up to 6.3.1.0, allowing a local attacker to read/modify file system objects via unspecified vectors. IBM security pages describe two related vulnerabilities (CVE-2012-4859: local access; CVE-20...

CVE-2012-4859: Undefined Security Weakness

Unspecified vulnerability in IBM Tivoli Storage Manager for Space Management aka TSM HSM before 6.2.5.0 and 6.3.x before 6.3.1.0 allows local users to read or modify file system objects via unknown vectors...

CVE-2010-4604

Stack-based buffer overflow in the GeneratePassword function in dsmtca aka the Trusted Communications Agent or TCA in the backup-archive client in IBM Tivoli Storage Manager TSM 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows...

CVE-2010-4605

The affected product is IBM Tivoli Storage Manager (TSM) backup-archive client. Versions affected: 5.3.x prior to 5.3.6.10, 5.4.x prior to 5.4.3.4, 5.5.x prior to 5.5.3, 6.1.x prior to 6.1.4, and 6.2.x prior to 6.2.2 on Unix/Linux. Root cause and vectors are not detailed in the provided documents...

IBM Tivoli Storage Manager (TSM) - Local Privilege Escalation

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c ==-===-=====-=======-===========-=============-================= IBM Tivoli Storage Manager TSM Local Root Kryptos Logic, December 20...

CVE-2010-3754

Technical details about CVE-2010-3754 are not present in the provided connected documents. No specifics on affected components, root cause, or remediation are provided here; monitor for updates.

CVE-2010-3758

CVE-2010-3758 is linked to IBM Tivoli Storage Manager (TSM) FastBack Server, affecting FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1. The vulnerability comprises multiple stack-based buffer overflows in FastBackServer.exe that enable remote code execution via crafted inputs in network-facing paths...

CVE-2010-3761

IBM Tivoli Storage Manager FastBack Mount service (FastBackMount.exe) on Windows is affected by a memory corruption vulnerability in the UDP-based mount handling, allowing remote code execution. Affects FastBack 5.x (before 5.5.7) and 6.1.0.0–6.1.0.1; exploitation vectors are via crafted mount re...

CVE-2010-3756

Affected software: IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1, Server component (FastBackServer.exe). Vulnerability details: The function _CalcHashValueWithLength in FastBackServer.exe does not properly validate an unspecified length value. This may allow a remo...

CVE-2010-3757

CVE-2010-3757 describes a format-string vulnerability in the _Eventlog function of FastBackServer.exe (Server) affecting IBM Tivoli Storage Manager (TSM) FastBack v5.5.0.0–5.5.6.0 and v6.1.0.0–6.1.0.1. The flaw allows remote attackers to execute arbitrary code via format string specifiers appeari...