NetSight
IP …
high7.2Public exploit code

CVE-2010-4604

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe.

Affected products

VendorProductAffected versions
IbmTivoli Storage Manager
from 5.3.0 through 5.3.6.7
from 5.4.0 through 5.4.3.3
from 5.5.0 through 5.5.2.7
from 6.1.0 through 6.1.3

Weakness classification

CWE-787

References