CVE-2010-4604

Severity: high (CVSS 7.2 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2010-12-29 · updated 2026-06-16
Weakness: CWE-787

Description

Stack-based buffer overflow in the GeneratePassword function in dsmtca (aka the Trusted Communications Agent or TCA) in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.2.10, and 6.1.x before 6.1.3.1 on Unix and Linux allows local users to gain privileges by specifying a long LANG environment variable, and then sending a request over a pipe.

Affected products

IBM Corporation Tivoli Storage Manager: from 5.3.0 through 5.3.6.7; from 5.4.0 through 5.4.3.3; from 5.5.0 through 5.5.2.7; from 6.1.0 through 6.1.3

References

http://secunia.com/advisories/42639
http://securitytracker.com/id?1024901
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65491
http://www.exploit-db.com/exploits/15745
http://www.ibm.com/support/docview.wss?uid=swg21454745
http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c
http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt
http://www.securityfocus.com/archive/1/515263/100/0/threaded
http://www.vupen.com/english/advisories/2010/3251
http://secunia.com/advisories/42639
http://securitytracker.com/id?1024901
http://www-01.ibm.com/support/docview.wss?uid=swg1IC65491

Get alerted when CVE-2010-4604 or the next vulnerability affects your stack