CVE-2010-4605

Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors.

CVSS v2.0 6.6 MEDIUM

6.6^/10

CVSS v2.0 : MEDIUM

Vector : AV:L/AC:L/Au:N/C:N/I:C/A:C

Exploitability : 3.9 / Impact : 9.2

Access Vector LOCAL

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/42639	URL Repurposed Vendor Advisory
http://securitytracker.com/id?1024901	Third Party Advisory URL Repurposed VDB Entry
http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686	Broken Link Third Party Advisory
http://www.ibm.com/support/docview.wss?uid=swg21454745	Broken Link Third Party Advisory
http://www.vupen.com/english/advisories/2010/3251	URL Repurposed Vendor Advisory

Configurations

Configuration 1 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 2 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.3:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.4:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.5.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:5.5.2:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

Configuration 5 (hide)

AND

OR	cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:::::::*
	cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:::::::*

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

History

06 Jun 2023, 19:14

Type	Values Removed	Values Added
CPE	cpe:2.3:o:linux:linux_kernel::::::::	cpe:2.3:o:linux:linux_kernel:-:::::::*
References	~~(AIXAPAR) http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686 -~~	(AIXAPAR) http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686 - Broken Link, Third Party Advisory
References	~~(CONFIRM) http://www.ibm.com/support/docview.wss?uid=swg21454745 -~~	(CONFIRM) http://www.ibm.com/support/docview.wss?uid=swg21454745 - Broken Link, Third Party Advisory
References	~~(SECUNIA) http://secunia.com/advisories/42639 - Vendor Advisory~~	(SECUNIA) http://secunia.com/advisories/42639 - URL Repurposed, Vendor Advisory
References	~~(SECTRACK) http://securitytracker.com/id?1024901 -~~	(SECTRACK) http://securitytracker.com/id?1024901 - Third Party Advisory, URL Repurposed, VDB Entry
References	~~(VUPEN) http://www.vupen.com/english/advisories/2010/3251 - Vendor Advisory~~	(VUPEN) http://www.vupen.com/english/advisories/2010/3251 - URL Repurposed, Vendor Advisory

Information

Published : 2010-12-29 18:00

Updated : 2023-12-10 11:03

NVD link : CVE-2010-4605

Mitre link : CVE-2010-4605

CVE.ORG link : CVE-2010-4605

JSON object : View

Products Affected

linux

linux_kernel

ibm

tivoli_storage_manager

CWE

NVD-CWE-noinfo

{"id": "CVE-2010-4605", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.6, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 9.2, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-12-29T18:00:03.820", "references": [{"url": "http://secunia.com/advisories/42639", "tags": ["URL Repurposed", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://securitytracker.com/id?1024901", "tags": ["Third Party Advisory", "URL Repurposed", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686", "tags": ["Broken Link", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.ibm.com/support/docview.wss?uid=swg21454745", "tags": ["Broken Link", "Third Party Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2010/3251", "tags": ["URL Repurposed", "Vendor Advisory"], "source": "cve@mitre.org"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en el cliente de copia de seguridad de archivos en IBM Tivoli Storage Manager (TSM) v5.3.x anteriores a v5.3.6.10, v5.4.3.4 anterior a v5.4.x, v5.5.x anteriores a v5.5.3, v6.1.x anteriores a v6.1.4, y v6.2.x anteirores a v6.2.2 en Unix y Linux permite a usuarios locales sobrescribir archivos de su elecci\u00f3n a trav\u00e9s de vectores desconocidos."}], "lastModified": "2023-06-06T19:14:10.453", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A263333E-DB86-41BE-A508-731079429E62"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "93FCB242-C35B-4CDB-AE62-3CA5D312586B"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "70016926-5776-4A04-8D55-5CA12D1DA9B4"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "930B5AE2-CA47-47D7-96DE-F2B9F70337C8"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FAA5227-C1F5-48C1-A207-096F228E305E"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74B38E6A-86AA-4C35-AF3F-7F77DF647235"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "271A29AC-0890-495D-8DF7-2530CEAF6C2D"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43BE5332-C982-440A-A7AA-03B83415B444"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "74E095D6-D6C9-4E21-9CBA-508D043C4286"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EFD434E9-6D0E-4FDB-A39A-D9FAC7E825C0"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "22F74B9A-D31E-43E3-8A29-BFD09A9442F4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "11E968D1-8198-4686-BFDD-8499CB435B56"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40A8E0C4-8509-4372-99C7-CFBA2100AEBE"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5CBC191E-0CE6-4D9C-A75B-E3484AC3B4DE"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F956AF3F-0BDF-4F4B-AB29-418C39BEC8D5"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0642EDE5-7EBF-4FA3-9432-F82FE76EF9EB"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F4C19266-CDED-4DC0-8B50-560BA3B5DAC4"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0ADAA69-B258-4666-9AB7-7965429EA497"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3F4722BA-186A-4999-965E-ED5FA72D4BD0"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D9FF105A-6B8E-4849-875F-FD87EC9291E3"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "76EC7D2D-4B0A-4CDF-A523-85ABEF05D211"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C7DD9CE-0E95-45BB-9BB5-07652C9FD6C1"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6F3F3288-4280-43DA-B6E4-8240137105AD"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "90CAA216-D0B3-4ECB-8BBE-5288DE590DE6"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "45172E20-5E12-435E-815F-D543C9B6BD41"}, {"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9625017C-311D-423A-BFF8-AEB4CE7766FE"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "cve@mitre.org"}