NVD

Id
33760  
Name
CVE-2014-6185  
Description
dsmtca in the client in IBM Tivoli Storage Manager (TSM) 6.3 before 6.3.2.3, 6.4 before 6.4.2.2, and 7.1 before 7.1.1.3 does not properly restrict shared-library loading, which allows local users to gain privileges via a crafted DSO file.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-02-12  
Modified Date
2015-02-13  
Seq
2014-6185  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
175232 33760 CVE-2014-6185 IT05713  View
175233 33760 CVE-2014-6185 http://www-01.ibm.com/support/docview.wss?uid=swg21695715  View
175234 33760 CVE-2014-6185 ibm-tsm-cve20146185-dso(98521)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19016 JVNDB-2014-007891 IBM Tivoli Storage Manager のクライアントの dsmtca における権限を取得される脆弱性 IBM Tivoli Storage Manager (TSM) のクライアントの dsmtca は、共有ライブラリのロードを適切に制限しないため、権限を取得される脆弱性が存在します。 CVE-2014-6185 73476 CVE-2014-6185 33760 7.2 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007891.html 2014-09-02 2015-02-18 View