CVE-2009-3854

CVE-2009-3854 affects IBM Tivoli Storage Manager Client (traditional scheduler). A buffer overflow in the client’s traditional scheduler may allow remote code execution. Affected versions: TSM client 5.3 before 5.3.6.7 and 5.4 before 5.4.2. The issue is triggered via unspecified vectors in the sc...

CVE-2009-3855

In the provided documents, CVE-2009-3855 refers to multiple unspecified vulnerabilities in the IBM Tivoli Storage Manager (TSM) backups clients (UNIX/Linux) and the OS/400 API client. Affected versions are TSM 5.3 prior to 5.3.6.6, 5.4 prior to 5.4.2, and 5.5 prior to 5.5.1, with exploitation ass...

CVE-2009-1521

CVE-2009-1521 affects the Java GUI of IBM Tivoli Storage Manager (TSM) client versions 5.2.0.0–5.2.5.3, 5.3.0.0–5.3.6.5, 5.4.0.0–5.4.2.6, and 5.5.0.0–5.5.1.17, and the TSM Express client 5.3.3.0–5.3.6.5. The vulnerability is described as unspecified and allows attackers to read or modify arbitrar...

CVE-2009-1522

The CVE-2009-1522 entry applies to IBM Tivoli Storage Manager (TSM) Client versions 5.5.0.0 through 5.5.1.17 on AIX and Windows, where SSL is enabled. The root issue allows remote attackers to perform unspecified man-in-the-middle attacks and read arbitrary files via unknown vectors. This is caus...

CVE-2009-1520

CVE-2009-1520 affects the IBM Tivoli Storage Manager (TSM) client Web GUI across versions 5.1.0.0–5.1.8.2, 5.2.0.0–5.2.5.3, 5.3.0.0–5.3.6.4, 5.4.0.0–5.4.2.6, and 5.5.0.0–5.5.1.17. The issue is a buffer overflow in the Web GUI that can cause a denial of service (application crash) or arbitrary cod...

CVE-2003-1570

The CVE-2003-1570 issue affects IBM Tivoli Storage Manager (TSM) server versions 5.1.x, 5.2.x prior to 5.2.1.2, and 6.x prior to 6.1. The vulnerability allows remote authenticated administrators to observe the server console without requiring credentials in certain circumstances, effectively expo...

CVE-2009-1178

Technical details about CVE-2009-1178 are not publicly provided in the supplied sources; no concrete impact, vector, or remediation is documented here. Monitor for updates.

CVE-2004-2762

The CVE refers to IBM Tivoli Storage Manager (TSM) server on multiple tracks: 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1. When the HTTP communication method is enabled, remote attackers can cause a ...

CVE-2008-4563

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon dsmsvc.exe in the backup server in IBM Tivoli Storage Manager TSM Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted...

CVE-2008-4563

CVE-2008-4563 is a heap-based buffer overflow in adsmdll.dll 5.3.7.7296 used by the dsmsvc.exe daemon in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier, and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0. A remote attacker can exploit a crafted length value to execute arbi...

CVE-2009-0869

CVE-2009-0869 is a buffer overflow in the IBM Tivoli Storage Manager (TSM) HSM Client on Windows, affecting HSM Client versions 5.3.2.0–5.3.5.0, 5.4.0.0–5.4.2.5, and 5.5.0.0–5.5.1.4. The vulnerability allows remote attackers to cause a denial of service (application crash) or possibly execute arb...

IBM TSM Client Remote Heap BOF Vulnerability

IBM TSM Client is prone to a heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0247

Summary: IBM Tivoli Storage Manager Express 5.3’s Backup Server component (dsmsvc.exe) is affected by a heap-based buffer overflow when handling a length field in a network packet. This vulnerability can be triggered by an unauthenticated remote attacker sending a crafted packet to the Express Ba...

CVE-2007-4348

CVE-2007-4348 affects IBM Tivoli Storage Manager Client CAD Service (Windows) versions 5.3.5.3 and 5.4.1.2. The vulnerability arises from insufficient sanitisation of input in HTTP requests to port 1581, which is logged to dsmerror.log and exposed via a web interface. This XSS can allow remote at...

IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit

No description provided by source. !/usr/bin/python IBM Tivoli Storage Manager Express CAD Service Buffer Overflow 5.3 http://www.zerodayinitiative.com/advisories/ZDI-07-054.html Tested on windows 2003 server SP0. Coded by Mati Aharoni muts.at.offensive-security.com...

CVE-2003-1361

The CVE-2003-1361 entry concerns VERITAS Bare Metal Restore (BMR) within Tivoli Storage Manager (TSM) versions 3.1.0 through 3.2.1. It states that a vulnerability could allow remote attackers to gain root privileges on the BMR Main Server. The documents do not provide further technical details on...

CVE-2007-4880

Buffer overflow in the Client Acceptor Daemon CAD, dsmcad.exe, in certain IBM Tivoli Storage Manager TSM clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905...

CVE-2007-4880

CVE-2007-4880 is a buffer overflow in the IBM Tivoli Storage Manager (TSM) Client CAD Service (dsmcad.exe) that allows remote code execution via crafted HTTP headers. Affected are TSM client versions: 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2. Exploitation...

CVE-2007-5022

IBM Tivoli Storage Manager Client versions 5.x prior to 5.1.8.1/5.2.5.2/5.3.5.3/5.4.1.2 are affected by CVE-2007-5022. The Nessus entry describes a buffer overflow in the Client Acceptor Daemon (CAD) service that can be triggered by an HTTP request with a long Host header, potentially crashing th...

CVE-2006-6309

CVE-2006-6309 describes multiple array/index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4. A remote attacker could read arbitrary memory locations and trigger a denial of service (crash) via a large index value in unspecified messages. This vulnerability is disti...