CVE-2006-5855

Published: Dec 6, 2006Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.

Affected (6)

Products: Ibm: Tivoli Storage Manager

1 product

Tivoli Storage Manager

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Manager	Version 5.2.7
Ibm Tivoli Storage Manager	Version 5.2.8
Ibm Tivoli Storage Manager	Version 5.3.0
Ibm Tivoli Storage Manager	Version 5.3.1
Ibm Tivoli Storage Manager	Version 5.3.2
Ibm Tivoli Storage Manager	Version 5.3.3

References (30)

http://secunia.com/advisories/23177

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/1979

Source: cve@mitre.org

http://securitytracker.com/id?1017333

Source: cve@mitre.org

http://www-1.ibm.com/support/docview.wss?uid=swg1IC50347

Source: cve@mitre.org

PatchVendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg21250261

Source: cve@mitre.org

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/350625

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/478753

Source: cve@mitre.org

US Government Resource

http://www.kb.cert.org/vuls/id/887249

Source: cve@mitre.org

US Government Resource

http://www.securityfocus.com/archive/1/453544/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/21440

Source: cve@mitre.org

PatchVendor Advisory

http://www.tippingpoint.com/security/advisories/TSRT-06-14.html

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2006/4856

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30699

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30701

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/30702

Source: cve@mitre.org

http://secunia.com/advisories/23177

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securityreason.com/securityalert/1979

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1017333

Source: af854a3a-2127-422b-91ae-364da2661108

http://www-1.ibm.com/support/docview.wss?uid=swg1IC50347

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www-1.ibm.com/support/docview.wss?uid=swg21250261

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.kb.cert.org/vuls/id/350625

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.kb.cert.org/vuls/id/478753

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.kb.cert.org/vuls/id/887249

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.securityfocus.com/archive/1/453544/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/21440

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.tippingpoint.com/security/advisories/TSRT-06-14.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2006/4856

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30699

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30701

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/30702

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.