Description
The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1.
References (8)
Core 8
Core References
Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/0881
Vendor Advisory vendor-advisory
x_refsource_aixapar
http://www-1.ibm.com/support/docview.wss?uid=swg1IC39395
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/49535
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21375360
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/34285
Various Sources x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21246076
Vendor Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/34498
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1021946
Scores
EPSS
0.0149
EPSS Percentile
71.4%
Details
Status
published
Products (17)
ibm/tivoli_storage_manager
4.2
ibm/tivoli_storage_manager
4.2.1
ibm/tivoli_storage_manager
4.2.2
ibm/tivoli_storage_manager
4.2.3
ibm/tivoli_storage_manager
4.2.4
ibm/tivoli_storage_manager
5.1.0
ibm/tivoli_storage_manager
5.1.1
ibm/tivoli_storage_manager
5.1.5
ibm/tivoli_storage_manager
5.1.6
ibm/tivoli_storage_manager
5.1.7
... and 7 more
Published
Mar 31, 2009
Tracked Since
Feb 18, 2026