CyberSec.Space Logo
Back to CVE Browser

CVE-2009-1520

CRITICAL
10.0
CVSS Severity Score
EPSS Score0.1120%
EPSS Percentile38.38th
PublishedMay 5, 2009
Last ModifiedApr 23, 2026

Vulnerability Description

Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors.

Affected Platforms (CPE)

📦
Ibm

Tivoli Storage Manager Client

= 5.1
📦
Ibm

Tivoli Storage Manager Client

= 5.1.8.0
📦
Ibm

Tivoli Storage Manager Client

= 5.1.8.2
📦
Ibm

Tivoli Storage Manager Client

= 5.2
📦
Ibm

Tivoli Storage Manager Client

= 5.2.5.1
📦
Ibm

Tivoli Storage Manager Client

= 5.2.5.2
📦
Ibm

Tivoli Storage Manager Client

= 5.2.5.3
📦
Ibm

Tivoli Storage Manager Client

= 5.3
📦
Ibm

Tivoli Storage Manager Client

= 5.3.5.2
📦
Ibm

Tivoli Storage Manager Client

= 5.3.5.3
📦
Ibm

Tivoli Storage Manager Client

= 5.3.6.3
📦
Ibm

Tivoli Storage Manager Client

= 5.3.6.4
📦
Ibm

Tivoli Storage Manager Client

= 5.4
📦
Ibm

Tivoli Storage Manager Client

= 5.4.1.1
📦
Ibm

Tivoli Storage Manager Client

= 5.4.1.2
📦
Ibm

Tivoli Storage Manager Client

= 5.4.1.96
📦
Ibm

Tivoli Storage Manager Express

= 5.3
📦
Ibm

Tivoli Storage Manager Express

= 5.3.3.0
📦
Ibm

Tivoli Storage Manager Express

= 5.3.6.4

References & Advisories

🔗 http://secunia.com/advisories/32604
🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21384389
🔗 http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994
🔗 http://www.vupen.com/english/advisories/2009/1235
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/50328
🔗 http://secunia.com/advisories/32604
🔗 http://www-01.ibm.com/support/docview.wss?uid=swg21384389
🔗 http://www-1.ibm.com/support/docview.wss?uid=swg1IC59994

Related Vulnerabilities

CVE-2008-480110.0

Heap-based buffer overflow in the Data Protection for SQL CAD service (aka dsmcat.exe) in the Client Acceptor Daemon (CAD) and the...

CVE-2008-482810.0

Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5...

CVE-2007-488010.0

Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5....

CVE-2009-086910.0

Buffer overflow in the client in IBM Tivoli Storage Manager (TSM) HSM 5.3.2.0 through 5.3.5.0, 5.4.0.0 through 5.4.2.5, and 5.5.0....