Unscored severity · published Dec 29, 2010
CVE-2010-4604
Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager…
–
CVSS
0.9%
EPSS
No
On KEV
Description
Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TS
Tivoli Storage Manager · Ibm
5.3.0 through 5.3.6.7; 5.4.0 through 5.4.3.3; 5.5.0 through 5.5.2.7; 6.1.0 through 6.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-4604
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-4604
Broken Link
http://secunia.com/advisories/42639
Broken Link
http://securitytracker.com/id?1024901
Broken Link
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65491
Exploit
http://www.exploit-db.com/exploits/15745
Broken Link
http://www.ibm.com/support/docview.wss?uid=swg21454745
Broken Link
http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c
More from Tivoli Storage Manager
9.8
CVE-2016-8937
The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerable to a brute force attack due to disclosing too much information…
8.8
CVE-2016-8940
IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority checking on SQL queries
8.8
CVE-2016-6045
IBM Tivoli Storage Manager Operations Center is vulnerable to cross-site request forgery which could allow an attacker to execute malicious and unauthorized actions transmitted…
7.8
CVE-2017-1378
IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to Vmware vCenter in the application trace output which could be…
7.8
CVE-2016-5985
The IBM Tivoli Storage Manager (IBM Spectrum Protect) AIX client is vulnerable to a buffer overflow when Journal-Based Backup is enabled