Secunia

A vulnerability has been reported in IBM Tivoli Storage Manager (TSM), which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an input validation error within adsmdll.dll when processing session data. This can be exploited to cause a heap-based buffer and may allow execution of arbitrary code.

The vulnerability is reported in the following versions:
* TSM 5.4 (5.4.0.0 to 5.4.4.0)
* TSM 5.3 (all levels)
* TSM 5.2 (all levels)
* TSM Express (all levels)

Solution
TSM 5.4 :
Further details available in Customer Area

Provided and/or discovered by
* An anonymous person, reported via iDefense.
* Vulnerability Research Team, Assurent Secure Technologies

Changelog
Further details available in Customer Area

Original Advisory
IBM:
http://www-01.ibm.com/support/docview.wss?uid=swg21377388

iDefense:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=775

Assurent Secure Technologies:
http://lists.grok.org.uk/pipermail/full-disclosure/2009-March/068349.html

Deep Links
Links available in Customer Area