PT-2009-3461 · Ibm · Ibm Tivoli Storage Manager (Tsm) Hsm

Published 2009-03-10 · Updated 2009-06-17 · CVE-2009-0869

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager (TSM) HSM versions 5.3.2.0 through 5.3.5.0 IBM Tivoli Storage Manager (TSM) HSM versions 5.4.0.0 through 5.4.2.5 IBM Tivoli Storage Manager (TSM) HSM versions 5.5.0.0 through 5.5.1.4

Description The issue is a buffer overflow in the client component, allowing remote attackers to potentially cause a denial of service or execute arbitrary code. This can be achieved via unspecified vectors.

Recommendations For versions 5.3.2.0 through 5.3.5.0, update to a version outside of this range to resolve the issue. For versions 5.4.0.0 through 5.4.2.5, update to a version outside of this range to resolve the issue. For versions 5.5.0.0 through 5.5.1.4, update to a version outside of this range to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-0869

Affected Products

Ibm Tivoli Storage Manager (Tsm) Hsm

References · 7

• http://www-1.ibm.com/support/docview.wss?uid=swg1IC59481 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2009-0869 · Security Note
• http://secunia.com/advisories/34189 · Vendor Advisory
• http://securityfocus.com/bid/34034 · Patch
• http://www-01.ibm.com/support/docview.wss?uid=swg21329223 · Vendor Advisory
• http://vupen.com/english/advisories/2009/0638 · Vendor Advisory
• http://securitytracker.com/id?1021820 · Note