Cisco Wireless LAN Controller TSM SNMP Denial of Service Vulnerability

A vulnerability in the traffic stream metrics TSM implemented with the Inter-Access Point Protocol IAPP of the Cisco Wireless LAN Controller WLC could allow an unauthenticated, adjacent attacker to cause a denial of service DoS condition because the process on the WLC unexpectedly restarts. The D...

Multiple ThinkServer System Manager (TSM) *50-series Security Weaknesses

Lenovo Security Advisory: LEN-2015-024 Potential Impact: Unauthorized Access; Escalation of Privilege; Denial of Service; Man-in-the-Middle MitM Attack Severity: High Summary: Multiple security weaknesses were discovered in the ThinkServer System Manager TSM Baseboard Management Controller for th...

Multiple ThinkServer System Manager (TSM) *50-series Security Weaknesses - Lenovo Support US

No description provided...

IBM TSM for Virtual Environments 6.3.x < 6.3.2.5 / 6.4.x < 6.4.3.1 / 7.1.x < 7.1.3.0 XSS

The version of IBM Tivoli Storage Manager TSM for Virtual Environments installed on the remote host is 6.3.x prior to 6.3.2.5, 6.4.x prior to 6.4.3.1, or 7.1.x prior to 7.1.3.0. It is, therefore, affected by a cross-site scripting XSS vulnerability due to improper validation of input before...

CVE-2015-3323

CVE-2015-3323 affects Lenovo ThinkServer System Manager (TSM) BMC in RD350, RD450, RD550, RD650 and TD350. The vulnerability is triggered by a malformed HTTP request during authentication, causing a denial of service by crashing the web interface. A fix is available in TSM firmware 1.27.73476 (an...

CVE-2015-3324

CVE-2015-3324 affects Lenovo ThinkServer System Manager (TSM) Baseboard Management Controller. The vulnerability is due to TSM firmware not validating server certificates during an encrypted remote KVM session, enabling man-in-the-middle attackers to spoof the server. Affected devices include Thi...

PT-2015-6151

Name of the Vulnerable Software and Affected Versions ThinkServer System Manager TSM Baseboard Management Controller versions prior to 1.27.73476 Description The issue concerns the lack of server certificate validation during an encrypted remote KVM session, allowing man-in-the-middle attackers t...

CVE-2015-3323: Improper Input Validation

The ThinkServer System Manager TSM Baseboard Management Controller before firmware 1.27.73476 for ThinkServer RD350, RD450, RD550, RD650, and TD350 allows remote attackers to cause a denial of service web interface crash via a malformed HTTP request during authentication...

CVE-2014-4818

IBM Tivoli Storage Manager UNIX/Linux clients contain a local information disclosure vulnerability (CVE-2014-4818) where the dsmtca component allows a local user to obtain the encryption key password used for backups/restores. Affected versions include TSM 5.4.x, 5.5.x, 6.x before 6.4.3, and 7.1....

CVE-2014-6184: Out-of-bounds Write

Stack-based buffer overflow in dsmtca in the client in IBM Tivoli Storage Manager TSM 5.4 through 5.4.3.6, 5.5 through 5.5.4.3, 6.1 through 6.1.5.6, 6.2 before 6.2.5.4, and 6.3 before 6.3.2.3 on UNIX, Linux, and OS X allows local users to gain privileges via unspecified vectors...

CVE-2014-6195

The 1 Java GUI and 2 Web GUI components in the IBM Tivoli Storage Manager TSM Backup-Archive client 5.4 and 5.5 before 5.5.4.4 on AIX, Linux, and Solaris; 5.4.x and 5.5.x on Windows and z/OS; 6.1 before 6.1.5.7 on z/OS; 6.1 and 6.2 before 6.2.5.2 on Windows, before 6.2.5.3 on AIX and Linux x86, a...

CVE-2014-6195

The CVE affects IBM Tivoli Storage Manager (TSM) Backup-Archive Client Java GUI and Web GUI when using Data Protection for Domino. Local attackers can bypass authentication and restore a Domino database or transaction-log backup via unspecified vectors. Affected versions include 5.4–5.5 before 5....

CVE-2014-6185

IBM Tivoli Storage Manager Client (dsmtca) on Linux x86_64 is affected by CVE-2014-6185, enabling local privilege escalation via loading an attacker-supplied DSO. Affected TSM Client versions include 6.3.0.0–6.3.2.2, 6.4.0.0–6.4.2.1, and 7.1.0.0–7.1.1.3. Remediation/patch levels provided by IBM i...

CVE-2014-4813

Race condition in the client in IBM Tivoli Storage Manager TSM 5.4.0.0 through 5.4.3.6, 5.5.0.0 through 5.5.4.3, 6.1.0.0 through 6.1.5.6, 6.2 before 6.2.5.4, 6.3 before 6.3.2.3, 6.4 before 6.4.2.1, and 7.1 before 7.1.1 on UNIX and Linux allows local users to obtain root privileges via unspecified...

CVE-2014-6185: Undefined Security Weakness

dsmtca in the client in IBM Tivoli Storage Manager TSM 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library loading, which allows local users to gain privileges via a crafted DSO file...

CVE-2014-4817

Summary: CVE-2014-4817 affects IBM Tivoli Storage Manager (TSM) server components. The vulnerability applies to TSM Server versions 5.x and 6.x prior to 6.3.5.10 and 7.x prior to 7.1.1.100, where a certain backup option combined with a filename that matches a previously used filename can allow re...

CVE-2014-4817: Undefined Security Weakness

The server in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.3.5.10 and 7.x before 7.1.1.100 allows remote attackers to bypass intended access restrictions and replace file backups by using a certain backup option in conjunction with a filename that matches a previously used filename...

PT-2014-3096

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager TSM for Space Management versions 5.x through 6.1.5.5 on Solaris and HP-UX IBM Tivoli Storage Manager TSM for Space Management versions 5.x through 6.2.5.2 on Linux and AIX IBM Tivoli Storage Manager TSM for Space...

Buffer overflow

Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager TSM 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service application crash o...

CVE-2014-0876

CVE-2014-0876 affects IBM Tivoli Storage Manager (TSM) Backup-Archive client on Windows and macOS. The issue is a local buffer overrun in the Java GUI Configuration Wizard and Preferences Editor, leading to denial of service (crash or hang). Affected releases include TSM client 5.x and 6.x, with ...