CVE-2010-4605

Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors.

CVSS v2.0 6.6 MEDIUM

6.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:N/I:C/A:C

Exploitability : 3.9 / Impact : 9.2

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/42639	Vendor Advisory URL Repurposed
http://securitytracker.com/id?1024901	Third Party Advisory VDB Entry URL Repurposed
http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686	Broken Link Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21454745	Broken Link Third Party Advisory
http://www.vupen.com/english/advisories/2010/3251	Vendor Advisory URL Repurposed
http://secunia.com/advisories/42639	Vendor Advisory URL Repurposed
http://securitytracker.com/id?1024901	Third Party Advisory VDB Entry URL Repurposed
http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686	Broken Link Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21454745	Broken Link Third Party Advisory
http://www.vupen.com/english/advisories/2010/3251	Vendor Advisory URL Repurposed

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.3:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.4:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.5.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.5.2:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

History

21 Nov 2024, 01:21

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/42639 - URL Repurposed, Vendor Advisory~~	() http://secunia.com/advisories/42639 - Vendor Advisory, URL Repurposed
References	~~() http://securitytracker.com/id?1024901 - Third Party Advisory, URL Repurposed, VDB Entry~~	() http://securitytracker.com/id?1024901 - Third Party Advisory, VDB Entry, URL Repurposed
References	~~() http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686 - Broken Link, Third Party Advisory~~	() http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686 - Broken Link, Third Party Advisory
References	~~() http://www.ibm.com/support/docview.wss?uid=swg21454745 - Broken Link, Third Party Advisory~~	() http://www.ibm.com/support/docview.wss?uid=swg21454745 - Broken Link, Third Party Advisory
References	~~() http://www.vupen.com/english/advisories/2010/3251 - URL Repurposed, Vendor Advisory~~	() http://www.vupen.com/english/advisories/2010/3251 - Vendor Advisory, URL Repurposed

06 Jun 2023, 19:14

Type	Values Removed	Values Added
References	~~(AIXAPAR) http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686 -~~	(AIXAPAR) http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686 - Broken Link, Third Party Advisory
References	~~(SECUNIA) http://secunia.com/advisories/42639 - Vendor Advisory~~	(SECUNIA) http://secunia.com/advisories/42639 - URL Repurposed, Vendor Advisory
References	~~(VUPEN) http://www.vupen.com/english/advisories/2010/3251 - Vendor Advisory~~	(VUPEN) http://www.vupen.com/english/advisories/2010/3251 - URL Repurposed, Vendor Advisory
References	~~(CONFIRM) http://www.ibm.com/support/docview.wss?uid=swg21454745 -~~	(CONFIRM) http://www.ibm.com/support/docview.wss?uid=swg21454745 - Broken Link, Third Party Advisory
References	~~(SECTRACK) http://securitytracker.com/id?1024901 -~~	(SECTRACK) http://securitytracker.com/id?1024901 - Third Party Advisory, URL Repurposed, VDB Entry
CPE	cpe:2.3:o:linux:linux_kernel::::::::	cpe:2.3:o:linux:linux_kernel:-:::::::*

Information

Published : 2010-12-29 18:00

Updated : 2025-04-11 00:51

NVD link : CVE-2010-4605

Mitre link : CVE-2010-4605

CVE.ORG link : CVE-2010-4605

JSON object : View

Products Affected

ibm

tivoli_storage_manager

linux

linux_kernel

CWE

NVD-CWE-noinfo

{"id": "CVE-2010-4605", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 9.2, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-12-29T18:00:03.820", "references": [{"url": "http://secunia.com/advisories/42639", "tags": ["Vendor Advisory", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1024901", "tags": ["Third Party Advisory", "VDB Entry", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686", "tags": ["Broken Link", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg21454745", "tags": ["Broken Link", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/3251", "tags": ["Vendor Advisory", "URL Repurposed"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/42639", "tags": ["Vendor Advisory", "URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://securitytracker.com/id?1024901", "tags": ["Third Party Advisory", "VDB Entry", "URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686", "tags": ["Broken Link", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg21454745", "tags": ["Broken Link", "Third Party Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.vupen.com/english/advisories/2010/3251", "tags": ["Vendor Advisory", "URL Repurposed"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el cliente de copia de seguridad de archivos en IBM Tivoli Storage Manager (TSM) v5.3.x anteriores a v5.3.6.10, v5.4.3.4 anterior a v5.4.x, v5.5.x anteriores a v5.5.3, v6.1.x anteriores a v6.1.4, y v6.2.x anteirores a v6.2.2 en Unix y Linux permite a usuarios locales sobrescribir archivos de su elecci\u00f3n a trav\u00e9s de vectores desconocidos."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A263333E-DB86-41BE-A508-731079429E62"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93FCB242-C35B-4CDB-AE62-3CA5D312586B"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70016926-5776-4A04-8D55-5CA12D1DA9B4"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "930B5AE2-CA47-47D7-96DE-F2B9F70337C8"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FAA5227-C1F5-48C1-A207-096F228E305E"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74B38E6A-86AA-4C35-AF3F-7F77DF647235"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "271A29AC-0890-495D-8DF7-2530CEAF6C2D"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43BE5332-C982-440A-A7AA-03B83415B444"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74E095D6-D6C9-4E21-9CBA-508D043C4286"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFD434E9-6D0E-4FDB-A39A-D9FAC7E825C0"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22F74B9A-D31E-43E3-8A29-BFD09A9442F4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11E968D1-8198-4686-BFDD-8499CB435B56"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40A8E0C4-8509-4372-99C7-CFBA2100AEBE"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CBC191E-0CE6-4D9C-A75B-E3484AC3B4DE"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F956AF3F-0BDF-4F4B-AB29-418C39BEC8D5"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0642EDE5-7EBF-4FA3-9432-F82FE76EF9EB"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4C19266-CDED-4DC0-8B50-560BA3B5DAC4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0ADAA69-B258-4666-9AB7-7965429EA497"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F4722BA-186A-4999-965E-ED5FA72D4BD0"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9FF105A-6B8E-4849-875F-FD87EC9291E3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76EC7D2D-4B0A-4CDF-A523-85ABEF05D211"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C7DD9CE-0E95-45BB-9BB5-07652C9FD6C1"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F3F3288-4280-43DA-B6E4-8240137105AD"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90CAA216-D0B3-4ECB-8BBE-5288DE590DE6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45172E20-5E12-435E-815F-D543C9B6BD41"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9625017C-311D-423A-BFF8-AEB4CE7766FE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}