CVE-2010-4605

The affected product is IBM Tivoli Storage Manager (TSM) backup-archive client. Versions affected: 5.3.x prior to 5.3.6.10, 5.4.x prior to 5.4.3.4, 5.5.x prior to 5.5.3, 6.1.x prior to 6.1.4, and 6.2.x prior to 6.2.2 on Unix/Linux. Root cause and vectors are not detailed in the provided documents...

IBM Tivoli Storage Manager (TSM) - Local Privilege Escalation

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c ==-===-=====-=======-===========-=============-================= IBM Tivoli Storage Manager TSM Local Root Kryptos Logic, December 20...

CVE-2010-3758

CVE-2010-3758 is linked to IBM Tivoli Storage Manager (TSM) FastBack Server, affecting FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1. The vulnerability comprises multiple stack-based buffer overflows in FastBackServer.exe that enable remote code execution via crafted inputs in network-facing paths...

CVE-2010-3761

IBM Tivoli Storage Manager FastBack Mount service (FastBackMount.exe) on Windows is affected by a memory corruption vulnerability in the UDP-based mount handling, allowing remote code execution. Affects FastBack 5.x (before 5.5.7) and 6.1.0.0–6.1.0.1; exploitation vectors are via crafted mount re...

CVE-2010-3760

IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1 have a memory allocation failure in the Mount service (FastBackMount.exe) that can be triggered by a large TCP packet size, causing a NULL pointer dereference and a daemon crash with recovery failure (remote DoS). This ...

CVE-2010-3756

Affected software: IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1, Server component (FastBackServer.exe). Vulnerability details: The function _CalcHashValueWithLength in FastBackServer.exe does not properly validate an unspecified length value. This may allow a remo...

CVE-2010-3757

CVE-2010-3757 describes a format-string vulnerability in the _Eventlog function of FastBackServer.exe (Server) affecting IBM Tivoli Storage Manager (TSM) FastBack v5.5.0.0–5.5.6.0 and v6.1.0.0–6.1.0.1. The flaw allows remote attackers to execute arbitrary code via format string specifiers appeari...

CVE-2010-3755

The vulnerability CVE-2010-3755 affects IBM Tivoli Storage Manager (TSM) FastBack Server. FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1 expose the _DAS_ReadBlockReply function in FastBackServer.exe, which can be reached over TCP data and leads to a NULL pointer dereference and daemon crash (DoS). ...

CVE-2010-3754

Technical details about CVE-2010-3754 are not present in the provided connected documents. No specifics on affected components, root cause, or remediation are provided here; monitor for updates.

IBM TSM FastBack multiple security vulnerabilities

Multiple code execution and denial of service conditions...

IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli FastBack Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within FastBackServer.exe which listens by default on TCP port 11460. The vulnerab...

IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Fastback. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Mount service FastBackMount.exe. This process listens by defau...

CVE-2010-3061

IBM Tivoli Storage Manager (TSM) FastBack Mount service is affected by CVE-2010-3061. The vulnerability lies in the message-protocol implementation of the Mount service in FastBack 5.x.x before 5.5.7 and in 6.1.0.0, allowing remote attackers to cause a denial of service (recovery failure) and pot...

CVE-2010-3060

CVE-2010-3060 targets IBM Tivoli Storage Manager (TSM) FastBack Server. The vulnerability resides in the server’s message-protocol handling for FastBack 5.x (pre-5.5.7) and 6.1.0.0, enabling remote DoS (daemon outage) via unknown vectors. Related entries (e.g., CVE-2010-3756, CVE-2010-3755) descr...

IBM Tivoli Storage Manager Express RCA Service - Remote Buffer Overflow (Metasploit)

$Id: ibmtsmrcadicugetidentify.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IBM Tivoli Storage Manager Express RCA Service Buffer Overflow

This module exploits a stack buffer overflow in the IBM Tivoli Storage Manager Express Remote Client Agent service. By sending a "dicuGetIdentify" request packet containing a long NodeName parameter, an attacker can execute arbitrary code. NOTE: this exploit first connects to the CAD service to...

CVE-2009-3853

Stack-based buffer overflow in the client acceptor daemon CAD scheduler in the client in IBM Tivoli Storage Manager TSM 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to execute arbitrary code via...

CVE-2009-3855

In the provided documents, CVE-2009-3855 refers to multiple unspecified vulnerabilities in the IBM Tivoli Storage Manager (TSM) backups clients (UNIX/Linux) and the OS/400 API client. Affected versions are TSM 5.3 prior to 5.3.6.6, 5.4 prior to 5.4.2, and 5.5 prior to 5.5.1, with exploitation ass...

CVE-2009-3854

CVE-2009-3854 affects IBM Tivoli Storage Manager Client (traditional scheduler). A buffer overflow in the client’s traditional scheduler may allow remote code execution. Affected versions: TSM client 5.3 before 5.3.6.7 and 5.4 before 5.4.2. The issue is triggered via unspecified vectors in the sc...

CVE-2009-1521

CVE-2009-1521 affects the Java GUI of IBM Tivoli Storage Manager (TSM) client versions 5.2.0.0–5.2.5.3, 5.3.0.0–5.3.6.5, 5.4.0.0–5.4.2.6, and 5.5.0.0–5.5.1.17, and the TSM Express client 5.3.3.0–5.3.6.5. The vulnerability is described as unspecified and allows attackers to read or modify arbitrar...