QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2006-5855

Back to search

CVE-2006-5855

Published: Dec 6, 2006

Modified: Aug 7, 2024

PUBLISHED

Description

Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.

VendorProductVersions

n/a

n/a

affected
n/a

References

IC50347
vendor-advisory
x_refsource_AIXAPAR
VU#350625
third-party-advisory
x_refsource_CERT-VN
1979
third-party-advisory
x_refsource_SREASON
ADV-2006-4856
vdb-entry
x_refsource_VUPEN
21440
vdb-entry
x_refsource_BID
VU#887249
third-party-advisory
x_refsource_CERT-VN
1017333
vdb-entry
x_refsource_SECTRACK
tivoli-login-language-bo(30699)
vdb-entry
x_refsource_XF
23177
third-party-advisory
x_refsource_SECUNIA
VU#478753
third-party-advisory
x_refsource_CERT-VN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now