VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML
CVE-2010-4605
tivoli_storage_manager: Unspecified vulnerability in the backup-archive cli...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4605

Original

Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors.

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-12-29
Source Information Category:
Advisory, Alert
Last Updated:
2010-12-30




Affected Product Tags
cpe:/a:ibm:tivoli_storage_manager:5.3.0
cpe:/a:ibm:tivoli_storage_manager:5.3.1
cpe:/a:ibm:tivoli_storage_manager:5.3.2
cpe:/a:ibm:tivoli_storage_manager:5.3.2.4
cpe:/a:ibm:tivoli_storage_manager:5.3.3
cpe:/a:ibm:tivoli_storage_manager:5.3.4
cpe:/a:ibm:tivoli_storage_manager:5.3.5.1
cpe:/a:ibm:tivoli_storage_manager:5.3.6.1
cpe:/a:ibm:tivoli_storage_manager:5.3.6.2
cpe:/a:ibm:tivoli_storage_manager:5.3.6.3
cpe:/a:ibm:tivoli_storage_manager:5.3.6.4
cpe:/a:ibm:tivoli_storage_manager:5.3.6.5
cpe:/a:ibm:tivoli_storage_manager:5.3.6.6
cpe:/a:ibm:tivoli_storage_manager:5.4.0
cpe:/a:ibm:tivoli_storage_manager:5.4.1
cpe:/a:ibm:tivoli_storage_manager:5.4.2
cpe:/a:ibm:tivoli_storage_manager:5.4.2.2
cpe:/a:ibm:tivoli_storage_manager:5.4.2.3
cpe:/a:ibm:tivoli_storage_manager:5.4.2.4
cpe:/a:ibm:tivoli_storage_manager:5.5.0
cpe:/a:ibm:tivoli_storage_manager:5.5.1
cpe:/a:ibm:tivoli_storage_manager:5.5.2
cpe:/a:ibm:tivoli_storage_manager:6.1.0
cpe:/a:ibm:tivoli_storage_manager:6.1.1
cpe:/a:ibm:tivoli_storage_manager:6.1.2
cpe:/a:ibm:tivoli_storage_manager:6.1.3
cpe:/a:ibm:tivoli_storage_manager:6.2.0
cpe:/a:ibm:tivoli_storage_manager:6.2.1
cpe:/o:linux:linux_kernel
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

X Local [?]
Adjacent Network [?]
Network [?]

[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
X Low [?]

[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]

[Confidentiality Impact]  [?]
Undefined [?]

X None [?]
Partial [?]
Complete [?]

[Integrity Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]

[Availability Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]

Alternatives




References
AIXAPAR IC66686




CONFIRM http://www.ibm.com/support/docview.wss?uid=swg21454745




SECTRACK 1024901




SECUNIA 42639




VUPEN ADV-2010-3251




Vulnerability Type Insufficient Information (NVD-CWE-noinfo)





Copyright © 2010 JPCERT/CC All Rights Reserved.