CyberSec.Space Logo
Back to CVE Browser

CVE-2008-4563

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1250%
EPSS Percentile39.83th
PublishedMar 11, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.

Affected Platforms (CPE)

📦
Ibm

Tivoli Storage Manager

= 5.2
📦
Ibm

Tivoli Storage Manager

= 5.3
📦
Ibm

Tivoli Storage Manager

= 5.3.0
📦
Ibm

Tivoli Storage Manager

= 5.3.1
📦
Ibm

Tivoli Storage Manager

= 5.3.2
📦
Ibm

Tivoli Storage Manager

= 5.3.2.4
📦
Ibm

Tivoli Storage Manager

= 5.3.3
📦
Ibm

Tivoli Storage Manager

= 5.3.4
📦
Ibm

Tivoli Storage Manager

= 5.3.5.1
📦
Ibm

Tivoli Storage Manager

= 5.4.0
📦
Ibm

Tivoli Storage Manager

= 5.4.1
📦
Ibm

Tivoli Storage Manager

= 5.4.2
📦
Ibm

Tivoli Storage Manager

= 5.4.2.2
📦
Ibm

Tivoli Storage Manager

= 5.4.2.3
📦
Ibm

Tivoli Storage Manager

= 5.4.2.4
📦
Ibm

Tivoli Storage Manager

= 5.4.4.0
📦
Ibm

Tivoli Storage Manager Express

= 5.3
📦
Ibm

Tivoli Storage Manager Express

= 5.3.3.0
📦
Ibm

Tivoli Storage Manager Express

= 5.3.6.4
📦
Ibm

Tivoli Storage Manager Express

= 5.3.7.3

References & Advisories

🔗 http://archives.neohapsis.com/archives/fulldisclosure/2009-03/0192.html
🔗 http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775
🔗 http://osvdb.org/52617
🔗 http://secunia.com/advisories/34245
🔗 http://securitytracker.com/id?1021837
🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21377388
🔗 http://www.securityfocus.com/bid/34077
🔗 http://www.vupen.com/english/advisories/2009/0669

Related Vulnerabilities

CVE-2006-585510.0

Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause ...

CVE-2007-488010.0

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5....

CVE-2003-136110.0

Unknown vulnerability in VERITAS Bare Metal Restore (BMR) of Tivoli Storage Manager (TSM) 3.1.0 through 3.2.1 allows remote attack...

CVE-2008-024710.0

Heap-based buffer overflow in the Express Backup Server service (dsmsvc.exe) in IBM Tivoli Storage Manager (TSM) Express 5.3 befor...