Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_storage_manager_client:5.4:*:*:*:*:*:*:*

part: a version: 5.4 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Storage Manager Client (da17be3d-de9a-5dde-81b6-ec86c0f99d9f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1520 vulnerable 2026-06-08 04:51:23.520491 Details available
Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors.
Published: 2009-05-05T17:00:00.000Z
Updated: 2024-08-07T05:13:25.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4828 vulnerable 2026-06-08 04:50:48.433586 Details available
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified "generic string handling function" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI.
Published: 2009-05-05T17:00:00.000Z
Updated: 2024-08-07T10:31:27.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-4880 vulnerable 2026-06-08 04:49:57.376294 Details available
Buffer overflow in the Client Acceptor Daemon (CAD), dsmcad.exe, in certain IBM Tivoli Storage Manager (TSM) clients 5.1 before 5.1.8.1, 5.2 before 5.2.5.2, 5.3 before 5.3.5.3, and 5.4 before 5.4.1.2 allows remote attackers to execute arbitrary code via crafted HTTP headers, aka IC52905.
Published: 2007-09-28T00:00:00.000Z
Updated: 2024-08-07T15:08:33.875Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.