CVE-2009-0869
Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denial of service (application crash) or possibly execute…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (6.44%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0.0 through 5.5.1.4 on Windows allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via unspecified vectors.
- CVSS 2.0
- 10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C
- EPSS
- 6.44% probability · 93th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-119
- Affected
- ibm/tivoli storage manager hsm
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/34189Vendor Advisory
- http://securitytracker.com/id?1021820
- http://www-01.ibm.com/support/docview.wss?uid=swg21329223Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC59481
- http://www.securityfocus.com/bid/34034Patch
- http://www.vupen.com/english/advisories/2009/0638Vendor Advisory
- http://secunia.com/advisories/34189Vendor Advisory
- http://securitytracker.com/id?1021820
- http://www-01.ibm.com/support/docview.wss?uid=swg21329223Patch, Vendor Advisory
- http://www-1.ibm.com/support/docview.wss?uid=swg1IC59481
- http://www.securityfocus.com/bid/34034Patch
- http://www.vupen.com/english/advisories/2009/0638Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.