CVE-2009-3855

IBM Tivoli Storage Manager <5.3.6.6-5.5.1 - Info Disclosure

Title source: llm
STIX 2.1

Description

Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6, 5.4 before 5.4.2, and 5.5 before 5.5.1, when the MAILPROG option is enabled, allow attackers to read, modify, or delete arbitrary files via unknown vectors.

References (4)

Core 4
Core References
Vendor Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2009/3132
Various Sources vendor-advisory x_refsource_aixapar
http://www-01.ibm.com/support/docview.wss?uid=swg1IC54489
Patch, Vendor Advisory x_refsource_confirm
http://www-01.ibm.com/support/docview.wss?uid=swg21405562
Third Party Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/32534

Scores

EPSS 0.0172
EPSS Percentile 75.1%

Details

Status published
Products (17)
ibm/tivoli_storage_manager 5.2.5.3
ibm/tivoli_storage_manager 5.3
ibm/tivoli_storage_manager 5.3.0
ibm/tivoli_storage_manager 5.3.1
ibm/tivoli_storage_manager 5.3.2
ibm/tivoli_storage_manager 5.3.2.4
ibm/tivoli_storage_manager 5.3.3
ibm/tivoli_storage_manager 5.3.4
ibm/tivoli_storage_manager 5.3.5.1
ibm/tivoli_storage_manager 5.3.6.1
... and 7 more
Published Nov 04, 2009
Tracked Since Feb 18, 2026