CVE-2009-1521

CVE-2009-1521 affects the Java GUI of IBM Tivoli Storage Manager (TSM) client versions 5.2.0.0–5.2.5.3, 5.3.0.0–5.3.6.5, 5.4.0.0–5.4.2.6, and 5.5.0.0–5.5.1.17, and the TSM Express client 5.3.3.0–5.3.6.5. The vulnerability is described as unspecified and allows attackers to read or modify arbitrar...

CVE-2009-1522

The CVE-2009-1522 entry applies to IBM Tivoli Storage Manager (TSM) Client versions 5.5.0.0 through 5.5.1.17 on AIX and Windows, where SSL is enabled. The root issue allows remote attackers to perform unspecified man-in-the-middle attacks and read arbitrary files via unknown vectors. This is caus...

CVE-2003-1570

The CVE-2003-1570 issue affects IBM Tivoli Storage Manager (TSM) server versions 5.1.x, 5.2.x prior to 5.2.1.2, and 6.x prior to 6.1. The vulnerability allows remote authenticated administrators to observe the server console without requiring credentials in certain circumstances, effectively expo...

CVE-2009-1178

Technical details about CVE-2009-1178 are not publicly provided in the supplied sources; no concrete impact, vector, or remediation is documented here. Monitor for updates.

CVE-2004-2762

The CVE refers to IBM Tivoli Storage Manager (TSM) server on multiple tracks: 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1. When the HTTP communication method is enabled, remote attackers can cause a ...

CVE-2008-4563

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon dsmsvc.exe in the backup server in IBM Tivoli Storage Manager TSM Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted...

CVE-2008-4563

CVE-2008-4563 is a heap-based buffer overflow in adsmdll.dll 5.3.7.7296 used by the dsmsvc.exe daemon in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier, and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0. A remote attacker can exploit a crafted length value to execute arbi...

CVE-2009-0869

CVE-2009-0869 is a buffer overflow in the IBM Tivoli Storage Manager (TSM) HSM Client on Windows, affecting HSM Client versions 5.3.2.0–5.3.5.0, 5.4.0.0–5.4.2.5, and 5.5.0.0–5.5.1.4. The vulnerability allows remote attackers to cause a denial of service (application crash) or possibly execute arb...

IBM TSM Client Remote Heap BOF Vulnerability

IBM TSM Client is prone to a heap based buffer overflow vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-0247

Summary: IBM Tivoli Storage Manager Express 5.3’s Backup Server component (dsmsvc.exe) is affected by a heap-based buffer overflow when handling a length field in a network packet. This vulnerability can be triggered by an unauthenticated remote attacker sending a crafted packet to the Express Ba...

CVE-2007-4348

CVE-2007-4348 affects IBM Tivoli Storage Manager Client CAD Service (Windows) versions 5.3.5.3 and 5.4.1.2. The vulnerability arises from insufficient sanitisation of input in HTTP requests to port 1581, which is logged to dsmerror.log and exposed via a web interface. This XSS can allow remote at...

IBM Tivoli Storage Manager 5.3 Express CAD Service BoF Exploit

No description provided by source. !/usr/bin/python IBM Tivoli Storage Manager Express CAD Service Buffer Overflow 5.3 http://www.zerodayinitiative.com/advisories/ZDI-07-054.html Tested on windows 2003 server SP0. Coded by Mati Aharoni muts.at.offensive-security.com...

CVE-2003-1361

The CVE-2003-1361 entry concerns VERITAS Bare Metal Restore (BMR) within Tivoli Storage Manager (TSM) versions 3.1.0 through 3.2.1. It states that a vulnerability could allow remote attackers to gain root privileges on the BMR Main Server. The documents do not provide further technical details on...

CVE-2007-4880

Buffer overflow in the Client Acceptor Daemon CAD, dsmcad.exe, in certain IBM Tivoli Storage Manager TSM clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905...

CVE-2007-4880

CVE-2007-4880 is a buffer overflow in the IBM Tivoli Storage Manager (TSM) Client CAD Service (dsmcad.exe) that allows remote code execution via crafted HTTP headers. Affected are TSM client versions: 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2. Exploitation...

CVE-2007-5022

IBM Tivoli Storage Manager Client versions 5.x prior to 5.1.8.1/5.2.5.2/5.3.5.3/5.4.1.2 are affected by CVE-2007-5022. The Nessus entry describes a buffer overflow in the Client Acceptor Daemon (CAD) service that can be triggered by an HTTP request with a long Host header, potentially crashing th...

CVE-2006-6309

CVE-2006-6309 describes multiple array/index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4. A remote attacker could read arbitrary memory locations and trigger a denial of service (crash) via a large index value in unspecified messages. This vulnerability is disti...

CVE-2006-5855

IBM Tivoli Storage Manager (TSM) Server is affected by CVE-2006-5855 due to multiple buffer overflows in the authentication/open registration paths. Vulnerable conditions involve: (1) a logon language field that begins with 0x18, (2) two unnamed parameters to SmExecuteWdsfSession, and (3) the con...

CVE-2003-0784

The entries describe a Format string vulnerability in the tsm package (bos.rte.security fileset) on AIX 5.2. The root cause is a format string flaw that can be exploited to gain root privileges via login (remote) and to gain privileges locally via login, su, or passwd when a username contains for...

CVE-2003-0784

Format string vulnerability in tsm for the bos.rte.security fileset on AIX 5.2 allows remote attackers to gain root privileges via login, and local users to gain privileges via login, su, or passwd, with a username that contains format string specifiers...