CVE-2014-6185

Published: Feb 13, 2015Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library loading, which allows local users to gain privileges via a crafted DSO file.

Affected (22)

Products: Ibm: Tivoli Storage Manager

Ibm

1 product

Tivoli Storage Manager

Configuration A

22 vulnerable

Vulnerable Software	Affected Versions
Ibm Tivoli Storage Manager	Version 6.3.0.15
Ibm Tivoli Storage Manager	Version 6.3.0.5
Ibm Tivoli Storage Manager	Version 6.3.0
Ibm Tivoli Storage Manager	Version 6.3.1.2
Ibm Tivoli Storage Manager	Version 6.3.2.1
Ibm Tivoli Storage Manager	Version 6.3.2.2
Ibm Tivoli Storage Manager	Version 6.4.0.1
Ibm Tivoli Storage Manager	Version 6.4.0.4
Ibm Tivoli Storage Manager	Version 6.4.0.5
Ibm Tivoli Storage Manager	Version 6.4.0.7
Ibm Tivoli Storage Manager	Version 6.4.0
Ibm Tivoli Storage Manager	Version 6.4.1.3
Ibm Tivoli Storage Manager	Version 6.4.1.7
Ibm Tivoli Storage Manager	Version 6.4.1
Ibm Tivoli Storage Manager	Version 6.4.2.1
Ibm Tivoli Storage Manager	Version 6.4.2
Ibm Tivoli Storage Manager	Version 7.1.0.1
Ibm Tivoli Storage Manager	Version 7.1.0.2
Ibm Tivoli Storage Manager	Version 7.1.0.3
Ibm Tivoli Storage Manager	Version 7.1.0
Ibm Tivoli Storage Manager	Version 7.1.1.1
Ibm Tivoli Storage Manager	Version 7.1.1