CVE-2006-6309 — IBM Tivoli Storage Manager vulnerability

3 documents3 sources

Severity

7.5HIGHNVD

CNA10.0

EPSS

1.5%

top 18.81%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

IBM Tivoli Storage Manager

Timeline

PublishedDec 6

Latest updateMay 1

Description

Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service (crash) via a large index value in unspecified messages, a different issue than CVE-2006-5855.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

▶NVDibm/tivoli_storage_manager5.2.9+4

🔴Vulnerability Details

GHSA

GHSA-hjwm-vvgm-jhxw: Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5↗2022-05-01

▶

CVEList

CVE-2006-6309: Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5↗2006-12-06

▶