Approved changes feed: RSS · Atom

cpe:2.3:a:ibm:tivoli_storage_manager_express:5.3:*:*:*:*:*:*:*

part: a version: 5.3 update: *

VendorIbm (177c0602-9232-5933-8f2f-9d22f079d22d)
ProductTivoli Storage Manager Express (6dd2e4b7-0ec7-5d80-b7e9-9dc7cd2ede10)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-1521 vulnerable 2026-06-08 04:51:23.532541 Details available
Unspecified vulnerability in the Java GUI in the IBM Tivoli Storage Manager (TSM) client 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.5, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17, and the TSM Express client 5.3.3.0 through 5.3.6.5, allows attackers to read or modify arbitrary files via unknown vectors.
Published: 2009-05-05T17:00:00.000Z
Updated: 2024-08-07T05:13:25.658Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1520 vulnerable 2026-06-08 04:51:23.522451 Details available
Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors.
Published: 2009-05-05T17:00:00.000Z
Updated: 2024-08-07T05:13:25.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4828 vulnerable 2026-06-08 04:50:48.435524 Details available
Multiple stack-based buffer overflows in dsmagent.exe in the Remote Agent Service in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, and 5.4.0.0 through 5.4.1.96, and the TSM Express client 5.3.3.0 through 5.3.6.4, allow remote attackers to execute arbitrary code via (1) a request packet that is not properly parsed by an unspecified "generic string handling function" or (2) a crafted NodeName in a dicuGetIdentifyRequest request packet, related to the (a) Web GUI and (b) Java GUI.
Published: 2009-05-05T17:00:00.000Z
Updated: 2024-08-07T10:31:27.946Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-4563 vulnerable 2026-06-08 04:50:39.352852 Details available
Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.
Published: 2009-03-11T14:00:00.000Z
Updated: 2024-08-07T10:24:19.002Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.