CVE-2009-3854

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2009-11-04 · updated 2026-06-16
Weakness: CWE-119

Description

Buffer overflow in the traditional client scheduler in the client in IBM Tivoli Storage Manager (TSM) 5.3 before 5.3.6.7 and 5.4 before 5.4.2 allows remote attackers to execute arbitrary code via unspecified vectors.

Affected products

IBM Corporation Tivoli Storage Manager: 5.2.5.3, 5.3, 5.3.0, 5.3.1, 5.3.2, 5.3.2.4 (+12)

References

http://secunia.com/advisories/32534
http://securitytracker.com/id?1023136
http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058
http://www-01.ibm.com/support/docview.wss?uid=swg21405562
http://www.vupen.com/english/advisories/2009/3132
http://secunia.com/advisories/32534
http://securitytracker.com/id?1023136
http://www-01.ibm.com/support/docview.wss?uid=swg1IC61058
http://www-01.ibm.com/support/docview.wss?uid=swg21405562
http://www.vupen.com/english/advisories/2009/3132

Get alerted when CVE-2009-3854 or the next vulnerability affects your stack