CVE-2014-0876: Buffer Overflow
First published: Sun Aug 17 2014(Updated: )
Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service (application crash or hang) via unspecified vectors.
Credit: psirt@us.ibm.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| IBM Tivoli Storage Manager | =5.4.0 | |
| IBM Tivoli Storage Manager | =5.5.0 | |
| IBM Tivoli Storage Manager | =6.1.0 | |
| IBM Tivoli Storage Manager | =6.2.0 | |
| IBM Tivoli Storage Manager | =6.3.0 | |
| IBM Tivoli Storage Manager | =6.4.0 | |
| Apple iOS and macOS | ||
| Microsoft Windows |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-0876?
CVE-2014-0876 has a medium severity rating due to its potential to cause application crashes.
How do I fix CVE-2014-0876?
To fix CVE-2014-0876, update IBM Tivoli Storage Manager to version 6.2.5.2 or higher for 6.x series, and to the latest version for 5.x series.
What versions of IBM Tivoli Storage Manager are affected by CVE-2014-0876?
CVE-2014-0876 affects IBM Tivoli Storage Manager versions 5.x and 6.x prior to versions 6.2.5.2, 6.3.2, and 6.4.2.
What types of operating systems are impacted by CVE-2014-0876?
CVE-2014-0876 impacts IBM Tivoli Storage Manager clients on Windows and macOS.
Can CVE-2014-0876 lead to data loss?
While CVE-2014-0876 primarily leads to application crashes, it can indirectly contribute to denial of service scenarios that may affect data operations.
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/remedy
- agent/last-modified-date
- agent/references
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/weakness
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/ibm
- canonical/ibm tivoli storage manager
- version/ibm tivoli storage manager/5.4.0
- version/ibm tivoli storage manager/5.5.0
- version/ibm tivoli storage manager/6.1.0
- version/ibm tivoli storage manager/6.2.0
- version/ibm tivoli storage manager/6.3.0
- version/ibm tivoli storage manager/6.4.0
- vendor/apple
- canonical/apple ios and macos
- vendor/microsoft
- canonical/microsoft windows