NVD

Id
15853  
Name
CVE-2010-4604  
Description
Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-12-29  
Modified Date
2011-01-04  
Seq
2010-4604  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
89857 15853 CVE-2010-4604 1024901  View
89858 15853 CVE-2010-4604 IC65491  View
89859 15853 CVE-2010-4604 15745  View
89860 15853 CVE-2010-4604 http://www.ibm.com/support/docview.wss?uid=swg21454745  View
89861 15853 CVE-2010-4604 http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c  View
89862 15853 CVE-2010-4604 http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt  View
89863 15853 CVE-2010-4604 20101215 Kryptos Logic Advisory: IBM Tivoli Storage Manager (TSM) Local Root  View
89864 15853 CVE-2010-4604 ADV-2010-3251  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
37757 JVNDB-2010-003542 IBM TSM の GeneratePassword 関数におけるスタックベースのバッファオーバーフローの脆弱性 IBM Tivoli Storage Manager (TSM) の backup-archive クライアントの dsmtca の GeneratePassword 関数には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2010-4604 47184 CVE-2010-4604 15853 6.9 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-003542.html 2010-12-29 2012-03-27 View