CVE-2009-3855
Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6, 5.4 before 5.4.2, and 5.5 before 5.5.1, when the MAILPROG option is…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.72%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Multiple unspecified vulnerabilities in the (1) UNIX and (2) Linux backup-archive clients, and the (3) OS/400 API client, in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.6, 5.4 before 5.4.2, and 5.5 before 5.5.1, when the MAILPROG option is enabled, allow attackers to read, modify, or delete arbitrary files via unknown vectors.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 1.72% probability · 76th percentile
- CISA KEV
- Not listed
- Affected
- ibm/tivoli storage manager
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/32534
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC54489
- http://www-01.ibm.com/support/docview.wss?uid=swg21405562Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/3132Vendor Advisory
- http://secunia.com/advisories/32534
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC54489
- http://www-01.ibm.com/support/docview.wss?uid=swg21405562Patch, Vendor Advisory
- http://www.vupen.com/english/advisories/2009/3132Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.