CVEvulnerability
CVE-2009-1520
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-05-05
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors.
Affected configurations
• ibm tivoli storage manager client 5.1
• ibm tivoli storage manager client 5.1.8.0
• ibm tivoli storage manager client 5.1.8.2
• ibm tivoli storage manager client 5.2
• ibm tivoli storage manager client 5.2.5.1
• ibm tivoli storage manager client 5.2.5.2
• ibm tivoli storage manager client 5.2.5.3
• ibm tivoli storage manager client 5.3
• ibm tivoli storage manager client 5.3.5.2
• ibm tivoli storage manager client 5.3.5.3
• ibm tivoli storage manager client 5.3.6.3
• ibm tivoli storage manager client 5.3.6.4
• ibm tivoli storage manager client 5.4
• ibm tivoli storage manager client 5.4.1.1
• ibm tivoli storage manager client 5.4.1.2
• ibm tivoli storage manager client 5.4.1.96
• ibm tivoli storage manager express 5.3
• ibm tivoli storage manager express 5.3.3.0
• ibm tivoli storage manager express 5.3.6.4
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/32604 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21384389 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1235 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50328 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/32604 secunia.com
- http://www-01.ibm.com/support/docview.wss?uid=swg21384389 Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994 Vendor Advisory
- http://www.vupen.com/english/advisories/2009/1235 www.vupen.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/50328 exchange.xforce.ibmcloud.com