CVE-2010-4604

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-787

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/42639Broken Link, Vendor Advisory
http://securitytracker.com/id?1024901Broken Link, Third Party Advisory, VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65491Broken Link
http://www.exploit-db.com/exploits/15745Exploit, Third Party Advisory, VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg21454745Broken Link, Vendor Advisory
http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.cBroken Link, Exploit
http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txtBroken Link
http://www.securityfocus.com/archive/1/515263/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/3251Broken Link, Vendor Advisory
http://secunia.com/advisories/42639Broken Link, Vendor Advisory
http://securitytracker.com/id?1024901Broken Link, Third Party Advisory, VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65491Broken Link
http://www.exploit-db.com/exploits/15745Exploit, Third Party Advisory, VDB Entry
http://www.ibm.com/support/docview.wss?uid=swg21454745Broken Link, Vendor Advisory
http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.cBroken Link, Exploit
http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txtBroken Link
http://www.securityfocus.com/archive/1/515263/100/0/threadedBroken Link, Third Party Advisory, VDB Entry
http://www.vupen.com/english/advisories/2010/3251Broken Link, Vendor Advisory

Timeline

Published: Dec 29, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-46056.6Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.CVE-2010-46067.5Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manage CVE-2010-46072.6Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbi CVE-2010-46085.0Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in sy CVE-2010-46097.5SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser para CVE-2010-46104.3Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML CVE-2010-46115.0Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (2) menu.php in includ CVE-2010-46126.8Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute CVE-2010-46137.5Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a ..CVE-2010-46147.5SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, CVE-2010-46157.5Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac p CVE-2010-46164.3Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before