CVEvulnerability
CVE-2002-0541
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2002-07-03
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581.
Affected configurations
• ibm tivoli storage manager 4.2
• ibm tivoli storage manager 4.2.1
References
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0126.html archives.neohapsis.com
- http://online.securityfocus.com/archive/1/267143 Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8817.php Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8825.php www.iss.net
- http://www.securityfocus.com/bid/4492 www.securityfocus.com
- http://www.securityfocus.com/bid/4500 Patch, Vendor Advisory
- http://www.tivoli.com/support/storage_mgr/flash_httpport.html Patch, Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0126.html archives.neohapsis.com
- http://online.securityfocus.com/archive/1/267143 Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8817.php Patch, Vendor Advisory
- http://www.iss.net/security_center/static/8825.php www.iss.net
- http://www.securityfocus.com/bid/4492 www.securityfocus.com
- http://www.securityfocus.com/bid/4500 Patch, Vendor Advisory
- http://www.tivoli.com/support/storage_mgr/flash_httpport.html Patch, Vendor Advisory