CVE-2009-1520

IBM Tivoli Storage Manager Client Buffer Overflow in Web GUI

Title source: llm

Description

Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/50328

Vendor Advisory x_refsource_confirm

http://www-01.ibm.com/support/docview.wss?uid=swg21384389

Vendor Advisory vendor-advisory x_refsource_aixapar

http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994

Third Party Advisory vdb-entry x_refsource_vupen

http://www.vupen.com/english/advisories/2009/1235

Third Party Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/32604

Scores

EPSS 0.0334

EPSS Percentile 87.3%

Details

CWE

CWE-119

Status published

Products (19)

ibm/tivoli_storage_manager_client 5.1

ibm/tivoli_storage_manager_client 5.1.8.0

ibm/tivoli_storage_manager_client 5.1.8.2

ibm/tivoli_storage_manager_client 5.2

ibm/tivoli_storage_manager_client 5.2.5.1

ibm/tivoli_storage_manager_client 5.2.5.2

ibm/tivoli_storage_manager_client 5.2.5.3

ibm/tivoli_storage_manager_client 5.3

ibm/tivoli_storage_manager_client 5.3.5.2

ibm/tivoli_storage_manager_client 5.3.5.3

... and 9 more

Published May 05, 2009

Tracked Since Feb 18, 2026