PT-2009-4018 · Ibm · Ibm Tsm Express+1

Published 2009-05-05 · Updated 2017-08-17 · CVE-2009-1521

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager (TSM) client versions 5.2.0.0 through 5.2.5.3 IBM Tivoli Storage Manager (TSM) client versions 5.3.0.0 through 5.3.6.5 IBM Tivoli Storage Manager (TSM) client versions 5.4.0.0 through 5.4.2.6 IBM Tivoli Storage Manager (TSM) client versions 5.5.0.0 through 5.5.1.17 IBM TSM Express client versions 5.3.3.0 through 5.3.6.5

Description: The issue allows attackers to read or modify arbitrary files via unknown vectors.

Recommendations: For IBM Tivoli Storage Manager (TSM) client versions 5.2.0.0 through 5.2.5.3, update to a version outside of this range. For IBM Tivoli Storage Manager (TSM) client versions 5.3.0.0 through 5.3.6.5, update to a version outside of this range. For IBM Tivoli Storage Manager (TSM) client versions 5.4.0.0 through 5.4.2.6, update to a version outside of this range. For IBM Tivoli Storage Manager (TSM) client versions 5.5.0.0 through 5.5.1.17, update to a version outside of this range. For IBM TSM Express client versions 5.3.3.0 through 5.3.6.5, update to a version outside of this range.

Fix

Related Identifiers

CVE-2009-1521

Affected Products

Ibm Tsm Express

Ibm Tivoli Storage Manager

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2009-1521 · Security Note
• http://www-1.ibm.com/support/docview.wss?uid=swg1IC59779 · Vendor Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg21384389 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/50329 · Note
• http://vupen.com/english/advisories/2009/1235 · Note
• http://secunia.com/advisories/32604 · Note