Vulnerability CVE-2013-6335
Published: 2014-08-26

Description:
The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.

Type:

CWE-264

 (Permissions, Privileges, and Access Controls)

CVSS2 => (AV:L/AC:H/Au:N/C:P/I:P/A:N)

CVSS Base Score
Impact Subscore
Exploitability Subscore
2.6/10
4.9/10
1.9/10
Exploit range
Attack complexity
Authentication
Local
High
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
None
Affected software
SUN -> Sunos 
Linux -> Linux kernel 
IBM -> Tivoli storage manager for space management 
IBM -> AIX 
HP -> Hp-ux 

 References:
http://xforce.iss.net/xforce/xfdb/89054
http://www-01.ibm.com/support/docview.wss?uid=swg21680453
http://www-01.ibm.com/support/docview.wss?uid=swg1IC96095
http://secunia.com/advisories/60482
Copyright 2024, cxsecurity.com

 

Back to Top