IBM Tivoli Storage Manager Client CVE-2014-6184 Local Stack Buffer Overflow Vulnerability

Bugtraq ID:	74320
Class:	Boundary Condition Error
CVE:	CVE-2014-6184
Remote:	No
Local:	Yes
Published:	Apr 24 2015 12:00AM
Updated:	Apr 24 2015 12:00AM
Credit:	Matthias Kaiser from Daimler TSS GmbH
Vulnerable:	IBM IBM Tivoli Storage Manager Client 6.1.4 IBM IBM Tivoli Storage Manager Client 5.5.3 IBM IBM Tivoli Storage Manager Client 6.3.2.2 IBM IBM Tivoli Storage Manager Client 6.3.1.0 IBM IBM Tivoli Storage Manager Client 6.3.0.0 IBM IBM Tivoli Storage Manager Client 6.2.5.3 IBM IBM Tivoli Storage Manager Client 6.2.5.0 IBM IBM Tivoli Storage Manager Client 6.2.4.0 IBM IBM Tivoli Storage Manager Client 6.2.1.1 IBM IBM Tivoli Storage Manager Client 6.2.1.0 IBM IBM Tivoli Storage Manager Client 6.2.0.0 IBM IBM Tivoli Storage Manager Client 6.1.5.6 IBM IBM Tivoli Storage Manager Client 6.1.5.0 IBM IBM Tivoli Storage Manager Client 6.1.3.4 IBM IBM Tivoli Storage Manager Client 6.1.3.0 IBM IBM Tivoli Storage Manager Client 6.1.0.0 IBM IBM Tivoli Storage Manager Client 5.5.4.3 IBM IBM Tivoli Storage Manager Client 5.5.4.0 IBM IBM Tivoli Storage Manager Client 5.5.2.7 IBM IBM Tivoli Storage Manager Client 5.5.2.12 IBM IBM Tivoli Storage Manager Client 5.5.0.0 IBM IBM Tivoli Storage Manager Client 5.4.3.6 IBM IBM Tivoli Storage Manager Client 5.4.3.4 IBM IBM Tivoli Storage Manager Client 5.4.3.3 IBM IBM Tivoli Storage Manager Client 5.4.0.0
Not Vulnerable:

IBM Tivoli Storage Manager Client CVE-2014-6184 Local Stack Buffer Overflow Vulnerability

IBM Tivoli Storage Manager Client is prone to a local stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data.

Successful exploits may allow attackers to execute arbitrary code in the context of the application with root privileges. Failed exploits may result in denial-of-service conditions.

IBM Tivoli Storage Manager Client CVE-2014-6184 Local Stack Buffer Overflow Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

IBM Tivoli Storage Manager Client CVE-2014-6184 Local Stack Buffer Overflow Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

IBM Tivoli Storage Manager Client CVE-2014-6184 Local Stack Buffer Overflow Vulnerability

References:

• IBM Homepage (IBM)
  
• Security Bulletin: Tivoli Storage Manager Stack-based Buffer Overflow Elevation (IBM)