CVE-2011-1222: Buffer Overflow
First published: Sun Jul 17 2011(Updated: )
Buffer overflow in the Journal Based Backup (JBB) feature in the backup-archive client in IBM Tivoli Storage Manager (TSM) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before 6.2.2 on Windows and AIX allows local users to gain privileges via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Tivoli Storage Manager | <=5.4.3.3 | |
| IBM Tivoli Storage Manager | =4.2 | |
| IBM Tivoli Storage Manager | =4.2.1 | |
| IBM Tivoli Storage Manager | =5.1.8 | |
| IBM Tivoli Storage Manager | =5.2.5.1 | |
| IBM Tivoli Storage Manager | =5.2.7 | |
| IBM Tivoli Storage Manager | =5.2.8 | |
| IBM Tivoli Storage Manager | =5.2.9 | |
| IBM Tivoli Storage Manager | =5.3.0 | |
| IBM Tivoli Storage Manager | =5.3.1 | |
| IBM Tivoli Storage Manager | =5.3.2 | |
| IBM Tivoli Storage Manager | =5.3.3 | |
| IBM Tivoli Storage Manager | =5.3.6.1 | |
| IBM Tivoli Storage Manager | =5.3.6.2 | |
| IBM Tivoli Storage Manager | =5.3.6.3 | |
| IBM Tivoli Storage Manager | =5.3.6.4 | |
| IBM Tivoli Storage Manager | =5.3.6.5 | |
| IBM Tivoli Storage Manager | =5.3.6.6 | |
| IBM Tivoli Storage Manager | =5.4.1 | |
| IBM Tivoli Storage Manager | =5.4.2 | |
| IBM Tivoli Storage Manager | =5.4.3.0 | |
| IBM Tivoli Storage Manager | =5.4.3.2 | |
| IBM Tivoli Storage Manager | =5.5.0 | |
| IBM Tivoli Storage Manager | =5.5.1 | |
| IBM Tivoli Storage Manager | =5.5.2 | |
| IBM Tivoli Storage Manager | =6.0 | |
| IBM Tivoli Storage Manager | =6.1.0 | |
| IBM Tivoli Storage Manager | =6.1.1 | |
| IBM Tivoli Storage Manager | =6.1.2 | |
| IBM Tivoli Storage Manager | =6.1.3 | |
| IBM Tivoli Storage Manager | =6.2.0 | |
| IBM Tivoli Storage Manager | =6.2.1 | |
| IBM AIX | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-1222?
CVE-2011-1222 is classified as a high severity vulnerability due to its potential for privilege escalation.
Who is affected by CVE-2011-1222?
CVE-2011-1222 affects local users of IBM Tivoli Storage Manager versions prior to 5.4.3.4, 5.5.3, 6.1.4, and 6.2.2 on Windows and AIX.
How do I fix CVE-2011-1222?
To fix CVE-2011-1222, upgrade IBM Tivoli Storage Manager to the latest version available that addresses this vulnerability.
What type of attack can be executed due to CVE-2011-1222?
CVE-2011-1222 allows local users to gain elevated privileges through unspecified vectors.
Is there a workaround for CVE-2011-1222 if I can't upgrade immediately?
There are no specific workarounds for CVE-2011-1222 other than applying the necessary updates as soon as possible.
- collector/nvd-historical
- agent/type
- agent/softwarecombine
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm tivoli storage manager
- version/ibm tivoli storage manager/5.4.3.3
- version/ibm tivoli storage manager/4.2
- version/ibm tivoli storage manager/4.2.1
- version/ibm tivoli storage manager/5.1.8
- version/ibm tivoli storage manager/5.2.5.1
- version/ibm tivoli storage manager/5.2.7
- version/ibm tivoli storage manager/5.2.8
- version/ibm tivoli storage manager/5.2.9
- version/ibm tivoli storage manager/5.3.0
- version/ibm tivoli storage manager/5.3.1
- version/ibm tivoli storage manager/5.3.2
- version/ibm tivoli storage manager/5.3.3
- version/ibm tivoli storage manager/5.3.6.1
- version/ibm tivoli storage manager/5.3.6.2
- version/ibm tivoli storage manager/5.3.6.3
- version/ibm tivoli storage manager/5.3.6.4
- version/ibm tivoli storage manager/5.3.6.5
- version/ibm tivoli storage manager/5.3.6.6
- version/ibm tivoli storage manager/5.4.1
- version/ibm tivoli storage manager/5.4.2
- version/ibm tivoli storage manager/5.4.3.0
- version/ibm tivoli storage manager/5.4.3.2
- version/ibm tivoli storage manager/5.5.0
- version/ibm tivoli storage manager/5.5.1
- version/ibm tivoli storage manager/5.5.2
- version/ibm tivoli storage manager/6.0
- version/ibm tivoli storage manager/6.1.0
- version/ibm tivoli storage manager/6.1.1
- version/ibm tivoli storage manager/6.1.2
- version/ibm tivoli storage manager/6.1.3
- version/ibm tivoli storage manager/6.2.0
- version/ibm tivoli storage manager/6.2.1
- canonical/ibm aix
- vendor/microsoft
- canonical/microsoft windows