CVEvulnerability
CVE-2009-3854
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-11-04
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute arbitrary code via unspecified vectors.
Affected configurations
• ibm tivoli storage manager 5.2.5.3
• ibm tivoli storage manager 5.3
• ibm tivoli storage manager 5.3.0
• ibm tivoli storage manager 5.3.1
• ibm tivoli storage manager 5.3.2
• ibm tivoli storage manager 5.3.2.4
• ibm tivoli storage manager 5.3.3
• ibm tivoli storage manager 5.3.4
• ibm tivoli storage manager 5.3.5.1
• ibm tivoli storage manager 5.3.6.1
• ibm tivoli storage manager 5.3.6.2
• ibm tivoli storage manager 5.3.6.3
• ibm tivoli storage manager 5.3.6.4
• ibm tivoli storage manager 5.3.6.5
• ibm tivoli storage manager 5.3.6.6
• ibm tivoli storage manager 5.4.0
• ibm tivoli storage manager 5.4.1
• ibm tivoli storage manager 5.5.0
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/32534 secunia.com
- http://securitytracker.com/id?1023136 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21405562 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/3132 Patch, Vendor Advisory
- http://secunia.com/advisories/32534 secunia.com
- http://securitytracker.com/id?1023136 securitytracker.com
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058 Vendor Advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21405562 Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/3132 Patch, Vendor Advisory