PT-2011-2961 · Ibm · Ibm Tivoli Storage Manager

Published 2011-07-17 · Updated 2011-07-19 · CVE-2011-1223

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager (TSM) versions 5.4.3.4 and earlier, 5.5.x through 5.5.2, 6.x through 6.1.3, and 6.2.x through 6.2.1

Description The issue is related to a buffer overflow in the Alternate Data Stream functionality in the backup-archive client. This allows local users to gain privileges via unspecified vectors.

Recommendations For versions 5.4.3.4 and earlier, update to version 5.4.3.4 or later. For versions 5.5.x through 5.5.2, update to version 5.5.3 or later. For versions 6.x through 6.1.3, update to version 6.1.4 or later. For versions 6.2.x through 6.2.1, update to version 6.2.2 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2011-1223

Affected Products

Ibm Tivoli Storage Manager

References · 6

• http://secunia.com/advisories/45098 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-1223 · Security Note
• http://ibm.com/support/docview.wss?uid=swg1IC77052 · Vendor Advisory
• http://securitytracker.com/id?1025741 · Note
• http://securityfocus.com/bid/48519 · Note
• http://ibm.com/support/docview.wss?uid=swg21457604 · Note