CVE-2012-5954

CVE-2012-5954 affects IBM Tivoli Storage Manager for Space Management (TSM HSM). The issue allows a remote attacker to read or modify HSM-managed file system objects via unknown vectors in affected versions: HSM before 6.2.5.0 and 6.3.x before 6.3.1.0. IBM bulletin details remediation: upgrade to...

CVE-2012-4859

CVE-2012-4859 affects IBM Tivoli Storage Manager for Space Management (TSM HSM) up to 6.2.5.0 and 6.3.x up to 6.3.1.0, allowing a local attacker to read/modify file system objects via unspecified vectors. IBM security pages describe two related vulnerabilities (CVE-2012-4859: local access; CVE-20...

CVE-2010-4604

Stack-based buffer overflow in the GeneratePassword function in dsmtca aka the Trusted Communications Agent or TCA in the backup-archive client in IBM Tivoli Storage Manager TSM 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows...

CVE-2010-4605

The affected product is IBM Tivoli Storage Manager (TSM) backup-archive client. Versions affected: 5.3.x prior to 5.3.6.10, 5.4.x prior to 5.4.3.4, 5.5.x prior to 5.5.3, 6.1.x prior to 6.1.4, and 6.2.x prior to 6.2.2 on Unix/Linux. Root cause and vectors are not detailed in the provided documents...

IBM Tivoli Storage Manager (TSM) - Local Privilege Escalation

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c ==-===-=====-=======-===========-=============-================= IBM Tivoli Storage Manager TSM Local Root Kryptos Logic, December 20...

CVE-2010-3755

The vulnerability CVE-2010-3755 affects IBM Tivoli Storage Manager (TSM) FastBack Server. FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1 expose the _DAS_ReadBlockReply function in FastBackServer.exe, which can be reached over TCP data and leads to a NULL pointer dereference and daemon crash (DoS). ...

CVE-2010-3757

CVE-2010-3757 describes a format-string vulnerability in the _Eventlog function of FastBackServer.exe (Server) affecting IBM Tivoli Storage Manager (TSM) FastBack v5.5.0.0–5.5.6.0 and v6.1.0.0–6.1.0.1. The flaw allows remote attackers to execute arbitrary code via format string specifiers appeari...

CVE-2010-3754

Technical details about CVE-2010-3754 are not present in the provided connected documents. No specifics on affected components, root cause, or remediation are provided here; monitor for updates.

CVE-2010-3756

Affected software: IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1, Server component (FastBackServer.exe). Vulnerability details: The function _CalcHashValueWithLength in FastBackServer.exe does not properly validate an unspecified length value. This may allow a remo...

CVE-2010-3760

IBM Tivoli Storage Manager (TSM) FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1 have a memory allocation failure in the Mount service (FastBackMount.exe) that can be triggered by a large TCP packet size, causing a NULL pointer dereference and a daemon crash with recovery failure (remote DoS). This ...

CVE-2010-3761

IBM Tivoli Storage Manager FastBack Mount service (FastBackMount.exe) on Windows is affected by a memory corruption vulnerability in the UDP-based mount handling, allowing remote code execution. Affects FastBack 5.x (before 5.5.7) and 6.1.0.0–6.1.0.1; exploitation vectors are via crafted mount re...

CVE-2010-3758

CVE-2010-3758 is linked to IBM Tivoli Storage Manager (TSM) FastBack Server, affecting FastBack 5.5.0.0–5.5.6.0 and 6.1.0.0–6.1.0.1. The vulnerability comprises multiple stack-based buffer overflows in FastBackServer.exe that enable remote code execution via crafted inputs in network-facing paths...

IBM TSM FastBack multiple security vulnerabilities

Multiple code execution and denial of service conditions...

IBM TSM FastBack Mount Service Arbitrary Overwrite Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli Storage Manager Fastback. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Mount service FastBackMount.exe. This process listens by defau...

IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IBM Tivoli FastBack Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within FastBackServer.exe which listens by default on TCP port 11460. The vulnerab...

CVE-2010-3060

CVE-2010-3060 targets IBM Tivoli Storage Manager (TSM) FastBack Server. The vulnerability resides in the server’s message-protocol handling for FastBack 5.x (pre-5.5.7) and 6.1.0.0, enabling remote DoS (daemon outage) via unknown vectors. Related entries (e.g., CVE-2010-3756, CVE-2010-3755) descr...

CVE-2010-3061

IBM Tivoli Storage Manager (TSM) FastBack Mount service is affected by CVE-2010-3061. The vulnerability lies in the message-protocol implementation of the Mount service in FastBack 5.x.x before 5.5.7 and in 6.1.0.0, allowing remote attackers to cause a denial of service (recovery failure) and pot...

IBM Tivoli Storage Manager Express RCA Service - Remote Buffer Overflow (Metasploit)

$Id: ibmtsmrcadicugetidentify.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

IBM Tivoli Storage Manager Express RCA Service Buffer Overflow

This module exploits a stack buffer overflow in the IBM Tivoli Storage Manager Express Remote Client Agent service. By sending a "dicuGetIdentify" request packet containing a long NodeName parameter, an attacker can execute arbitrary code. NOTE: this exploit first connects to the CAD service to...

CVE-2009-3853

Stack-based buffer overflow in the client acceptor daemon CAD scheduler in the client in IBM Tivoli Storage Manager TSM 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to execute arbitrary code via...