CVE-2009-3854
IBM Tivoli Storage Manager 5.3-5.3.6.6 and 5.4-5.4.1 - Remote Code Execution via Buffer Overflow
Title source: llmDescription
Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute arbitrary code via unspecified vectors.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1023136
Vendor Advisory vendor-advisory
x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058
Patch, Vendor Advisory vdb-entry
x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3132
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21405562
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/32534
Scores
EPSS
0.0581
EPSS Percentile
92.3%
Details
CWE
CWE-119
Status
published
Products (18)
ibm/tivoli_storage_manager
5.2.5.3
ibm/tivoli_storage_manager
5.3
ibm/tivoli_storage_manager
5.3.0
ibm/tivoli_storage_manager
5.3.1
ibm/tivoli_storage_manager
5.3.2
ibm/tivoli_storage_manager
5.3.2.4
ibm/tivoli_storage_manager
5.3.3
ibm/tivoli_storage_manager
5.3.4
ibm/tivoli_storage_manager
5.3.5.1
ibm/tivoli_storage_manager
5.3.6.1
... and 8 more
Published
Nov 04, 2009
Tracked Since
Feb 18, 2026