VRDA Feed by JPCERT/CC
  Vulnerability Response Decision Assistance Feed : Information for vulnerability impact analysis
[ about VRDA Feed | JPCERT/CC ] 



 
Vulnerability Analysis Result (Revision No : 1) [ Download XML ] 
CVE-2010-4606
tivoli_storage_manager: Unspecified vulnerability in the Space Management c...
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-4606

Original

Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manager (TSM) 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary commands via unknown vectors, related to a "script execution vulnerability."

Translation   (Show)





About This Analysis Information
Analysis Information Provider:
NIST NVD
First Published:
2010-12-29
Source Information Category:
Advisory, Alert
Last Updated:
2010-12-30




Affected Product Tags
cpe:/a:ibm:tivoli_storage_manager:5.4.0
cpe:/a:ibm:tivoli_storage_manager:5.4.1
cpe:/a:ibm:tivoli_storage_manager:5.4.2
cpe:/a:ibm:tivoli_storage_manager:5.4.2.2
cpe:/a:ibm:tivoli_storage_manager:5.4.2.3
cpe:/a:ibm:tivoli_storage_manager:5.4.2.4
cpe:/a:ibm:tivoli_storage_manager:5.5.0
cpe:/a:ibm:tivoli_storage_manager:5.5.1
cpe:/a:ibm:tivoli_storage_manager:5.5.2
cpe:/a:ibm:tivoli_storage_manager:6.1.0
cpe:/a:ibm:tivoli_storage_manager:6.1.1
cpe:/a:ibm:tivoli_storage_manager:6.1.2
cpe:/a:ibm:tivoli_storage_manager:6.1.3
cpe:/a:ibm:tivoli_storage_manager:6.2.0
cpe:/a:ibm:tivoli_storage_manager:6.2.1
cpe:/o:linux:linux_kernel
 


Vulnerability Analysis Results
[Access Vector]  [?]
Undefined [?]

Local [?]
Adjacent Network [?]
X Network [?]
[Access Complexit]  [?]
Undefined [?]

High [?]
Medium [?]
X Low [?]
[Authentication]  [?]
Undefined [?]

Multiple [?]
Single [?]
X None [?]
[Confidentiality Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]
[Integrity Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]
[Availability Impact]  [?]
Undefined [?]

None [?]
Partial [?]
X Complete [?]
Alternatives




References
AIXAPAR IC69150




CONFIRM http://www.ibm.com/support/docview.wss?uid=swg21454745




SECTRACK 1024901




SECUNIA 42639




VUPEN ADV-2010-3251




Vulnerability Type Insufficient Information (NVD-CWE-noinfo)




Copyright © 2010 JPCERT/CC All Rights Reserved.