CVEvulnerability
CVE-2011-1223
7.2 HIGH
Official page ↗
- Status
- Modified
- Published
- 2011-07-17
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the Alternate Data Stream (aka ADS or named stream) functionality in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before 6.2.2 on Windows allows local users to gain privileges via unspecified vectors.
Affected configurations
• ibm tivoli storage manager (<= 5.4.3.3)
• ibm tivoli storage manager 4.2
• ibm tivoli storage manager 4.2.1
• ibm tivoli storage manager 5.1.8
• ibm tivoli storage manager 5.2.5.1
• ibm tivoli storage manager 5.2.7
• ibm tivoli storage manager 5.2.8
• ibm tivoli storage manager 5.2.9
• ibm tivoli storage manager 5.3.0
• ibm tivoli storage manager 5.3.1
• ibm tivoli storage manager 5.3.2
• ibm tivoli storage manager 5.3.3
• ibm tivoli storage manager 5.3.6.1
• ibm tivoli storage manager 5.3.6.2
• ibm tivoli storage manager 5.3.6.3
• ibm tivoli storage manager 5.3.6.4
• ibm tivoli storage manager 5.3.6.5
• ibm tivoli storage manager 5.3.6.6
• ibm tivoli storage manager 5.4.1
• ibm tivoli storage manager 5.4.2
• ibm tivoli storage manager 5.4.3.0
• ibm tivoli storage manager 5.4.3.2
• ibm tivoli storage manager 5.5.0
• ibm tivoli storage manager 5.5.1
• ibm tivoli storage manager 5.5.2
• ibm tivoli storage manager 6.0
• ibm tivoli storage manager 6.1.0
• ibm tivoli storage manager 6.1.1
• ibm tivoli storage manager 6.1.2
• ibm tivoli storage manager 6.1.3
• ibm tivoli storage manager 6.2.0
• ibm tivoli storage manager 6.2.1
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://secunia.com/advisories/45098 Vendor Advisory
- http://securitytracker.com/id?1025741 securitytracker.com
- http://www.ibm.com/support/docview.wss?uid=swg1IC77052 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21457604 www.ibm.com
- http://www.securityfocus.com/bid/48519 www.securityfocus.com
- http://secunia.com/advisories/45098 Vendor Advisory
- http://securitytracker.com/id?1025741 securitytracker.com
- http://www.ibm.com/support/docview.wss?uid=swg1IC77052 www.ibm.com
- http://www.ibm.com/support/docview.wss?uid=swg21457604 www.ibm.com
- http://www.securityfocus.com/bid/48519 www.securityfocus.com