CVE Feed

    Dashboard / CVE / CVE-2010-4604

    CVE-2010-4604

    Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe.

    Published:Dec 29, 2010
    Last Modified:Apr 11, 2025
    EPS:Dec 29, 2010
    EPSS Score:0.00758
    CVSS Score:7.2

    Affected Products

    Vendor
    Ibm
    Product
    Tivoli Storage Manager
    Vendor
    Linux
    Product
    Linux Kernel

    Exploits

    http://www.exploit-db.com/exploits/15745http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.chttp://www.exploit-db.com/exploits/15745http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.chttps://www.exploit-db.com/exploits/15745

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-28198 (CVSS 7) — The 'id' parameter of IBM Tivoli Storage Manager Version 5 Release 2 (Command Line Administrative Interface, d…
    CVE-2018-1786 (CVSS 5.3) — IBM Spectrum Protect 7.1 and 8.1 dsmc and dsmcad processes incorrectly accumulate TCP/IP sockets in a CLOSE_WA…
    CVE-2018-1550 (CVSS 6.2) — IBM Spectrum Protect 7.1 and 8.1 could allow a local user to corrupt or delete highly sensitive information th…
    CVE-2016-8937 (CVSS 9.8) — The IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) default authentication protocol is vulnerabl…
    CVE-2017-1339 (CVSS 4.4) — IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) Server uses weak encryption for the passwor…
    CVE-2017-1301 (CVSS 5.5) — IBM Spectrum Protect 7.1 and 8.1 could allow a local attacker to launch a symlink attack. IBM Spectrum Protect…
    CVE-2017-1378 (CVSS 7.8) — IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Manager) disclosed unencrypted login credentials to …
    CVE-2016-8939 (CVSS 5.5) — IBM Tivoli Storage Manager (IBM Spectrum Protect 7.1 and 8.1) clients/agents store password information in the…
    CVE-2016-8916 (CVSS 5.5) — IBM Tivoli Storage Manager 5.5, 6.1-6.4, and 7.1 stores password information in a log file that could be read …
    CVE-2016-8940 (CVSS 8.8) — IBM Tivoli Storage Manager (IBM Spectrum Protect) 6.1, 6.2, 6.3, and 7.1 does not perform sufficient authority…

    References

    http://secunia.com/advisories/42639
    http://securitytracker.com/id?1024901
    http://www-01.ibm.com/support/docview.wss?uid=swg1IC65491
    http://www.exploit-db.com/exploits/15745
    http://www.ibm.com/support/docview.wss?uid=swg21454745
    http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c
    http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt
    http://www.securityfocus.com/archive/1/515263/100/0/threaded
    http://www.vupen.com/english/advisories/2010/3251
    http://secunia.com/advisories/42639
    http://securitytracker.com/id?1024901
    http://www-01.ibm.com/support/docview.wss?uid=swg1IC65491
    http://www.exploit-db.com/exploits/15745
    http://www.ibm.com/support/docview.wss?uid=swg21454745
    http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c
    http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt
    http://www.securityfocus.com/archive/1/515263/100/0/threaded
    http://www.vupen.com/english/advisories/2010/3251

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High