CVE-2006-6309

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-12-06 · updated 2026-06-16

Description

Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service (crash) via a large index value in unspecified messages, a different issue than CVE-2006-5855.

Affected products

IBM Corporation Tivoli Storage Manager: through 5.2.9; 5.3.0, 5.3.1, 5.3.2, 5.3.3

References

http://securityreason.com/securityalert/1979
http://www-1.ibm.com/support/docview.wss?uid=swg21250261
http://www.securityfocus.com/archive/1/453544/100/0/threaded
http://www.tippingpoint.com/security/advisories/TSRT-06-14.html
http://securityreason.com/securityalert/1979
http://www-1.ibm.com/support/docview.wss?uid=swg21250261
http://www.securityfocus.com/archive/1/453544/100/0/threaded
http://www.tippingpoint.com/security/advisories/TSRT-06-14.html

Get alerted when CVE-2006-6309 or the next vulnerability affects your stack