CVE-2010-4605

MediumCVSS 6.6/10Last modified Jun 16, 2026

Description

Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors.

Metrics

CVSS 2.0 6.6/10AV:L/AC:L/Au:N/C:N/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/42639Vendor Advisory, URL Repurposed
http://securitytracker.com/id?1024901Third Party Advisory, VDB Entry, URL Repurposed
http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686Broken Link, Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21454745Broken Link, Third Party Advisory
http://www.vupen.com/english/advisories/2010/3251Vendor Advisory, URL Repurposed
http://secunia.com/advisories/42639Vendor Advisory, URL Repurposed
http://securitytracker.com/id?1024901Third Party Advisory, VDB Entry, URL Repurposed
http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686Broken Link, Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21454745Broken Link, Third Party Advisory
http://www.vupen.com/english/advisories/2010/3251Vendor Advisory, URL Repurposed

Timeline

Published: Dec 29, 2010
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-46067.5Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management (HSM) component in IBM Tivoli Storage Manage CVE-2010-46072.6Multiple cross-site scripting (XSS) vulnerabilities in Habari 0.6.5, when register_globals is enabled, allow remote attackers to inject arbi CVE-2010-46085.0Habari 0.6.5 allows remote attackers to obtain sensitive information via a direct request to (1) header.php and (2) comments_items.php in sy CVE-2010-46097.5SQL injection vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to execute arbitrary SQL commands via the nuser para CVE-2010-46104.3Cross-site scripting (XSS) vulnerability in index.php in Html-edit CMS 3.1.8 allows remote attackers to inject arbitrary web script or HTML CVE-2010-46115.0Html-edit CMS 3.1.8 allows remote attackers to obtain sensitive information via a direct request to (1) pages.php and (2) menu.php in includ CVE-2010-46126.8Multiple SQL injection vulnerabilities in index.php in Hycus CMS 1.0.3, when magic_quotes_gpc is disabled, allow remote attackers to execute CVE-2010-46137.5Multiple directory traversal vulnerabilities in Hycus CMS 1.0.3 allow remote attackers to include and execute arbitrary local files via a ..CVE-2010-46147.5SQL injection vulnerability in item.php in Ero Auktion 2010 allows remote attackers to execute arbitrary SQL commands via the id parameter, CVE-2010-46157.5Multiple SQL injection vulnerabilities in Oto Galeri Sistemi 1.0 allow remote attackers to execute arbitrary SQL commands via the (1) arac p CVE-2010-46164.3Cross-site scripting (XSS) vulnerability in modules/content/admin/content.php in ImpressCMS 1.2.3 Final, and possibly other versions before CVE-2010-46176.8Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary fil