CVE-2009-3853

Published: Nov 4, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Stack-based buffer overflow in the client acceptor daemon (CAD) scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7, 5.4 before 5.4.3, 5.5 before 5.5.2.2, and 6.1 before 6.1.0.2, and TSM Express 5.3.3.0 through 5.3.6.6, allows remote attackers to execute arbitrary code via crafted data in a TCP packet.

Affected (27)

Products: Ibm: Tivoli Storage Manager

Ibm

1 product

Tivoli Storage Manager

Configuration A

27 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Manager	Version 5.2.5.3
Ibm Tivoli Storage Manager	Version 5.3.0
Ibm Tivoli Storage Manager	Version 5.3.1
Ibm Tivoli Storage Manager	Version 5.3.2.4
Ibm Tivoli Storage Manager	Version 5.3.2
Ibm Tivoli Storage Manager	Version 5.3.3
Ibm Tivoli Storage Manager	Version 5.3.3
Ibm Tivoli Storage Manager	Version 5.3.4
Ibm Tivoli Storage Manager	Version 5.3.4
Ibm Tivoli Storage Manager	Version 5.3.5.1
Ibm Tivoli Storage Manager	Version 5.3.5
Ibm Tivoli Storage Manager	Version 5.3.6.1
Ibm Tivoli Storage Manager	Version 5.3.6.2
Ibm Tivoli Storage Manager	Version 5.3.6.3
Ibm Tivoli Storage Manager	Version 5.3.6.4
Ibm Tivoli Storage Manager	Version 5.3.6.5
Ibm Tivoli Storage Manager	Version 5.3.6.6
Ibm Tivoli Storage Manager	Version 5.3.6.6
Ibm Tivoli Storage Manager	Version 5.3.6
Ibm Tivoli Storage Manager	Version 5.3
Ibm Tivoli Storage Manager	Version 5.4.0
Ibm Tivoli Storage Manager	Version 5.4.1
Ibm Tivoli Storage Manager	Version 5.4.2
Ibm Tivoli Storage Manager	Version 5.5.0
Ibm Tivoli Storage Manager	Version 5.5.1
Ibm Tivoli Storage Manager	Version 5.5.2
Ibm Tivoli Storage Manager	Version 6.1.0