CVE-2019-4088

CVE-2019-4088 affects IBM Spectrum Protect Server versions 7.1 and 8.1 and related Storage Agents. The issue is a local privilege-escalation caused by loading a specially crafted library via the dsmqsan module, allowing a local attacker to gain root privileges on the vulnerable system. Affected r...

Security Bulletin: Stack-based buffer overflow and elevation of privileges vulnerabilities in IBM Spectrum Protect Server and Storage Agents (CVE-2019-4087, CVE-2019-4088)

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Server and Storage Agents are vulnerable to a stack-based buffer overflow and elevation of privileges. Vulnerability Details CVEID: CVE-2019-4087 DESCRIPTION: IBM Spectrum Protect Servers and Storage Agents are vulnerable to a...