Some vulnerabilities have been reported in IBM Tivoli Storage Manager (TSM) Client, which can be exploited by malicious, local users to gain escalated privileges and by malicious users to compromise a vulnerable system.

1) A boundary error exists within the "GeneratePassword()" function in dsmtca. This can be exploited to cause a stack-based buffer overflow and gain escalated privileges.

2) An unspecified error in the backup-archive clients can be exploited to overwrite certain files.

3) An error within the Hierarchical Storage Management client can be exploited to execute arbitrary commands and e.g. read, copy, modify, or delete arbitrary files.

Please see the vendor's advisory for details on affected versions.

Solution
Apply patches. Please see the vendor's advisory for details.

Provided and/or discovered by
1) Peter Wilhelmsen and Daniel Kalici, Kryptos Logic.
2, 3) Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
IBM (IC65491, IC66686, IC69150)
http://www-01.ibm.com/support/docview.wss?uid=swg21454745
http://www-01.ibm.com/support/docview.wss?uid=swg24028681
http://www-01.ibm.com/support/docview.wss?uid=swg24028090
http://www-01.ibm.com/support/docview.wss?uid=swg24027432
http://www-01.ibm.com/support/docview.wss?uid=swg24024082

Kryptos Logic:
http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt

Deep Links
Links available to Secunia VIM customers