- 10 Microsoft research projects
- 10 kitchen gadgets for the geek gourmet
- Verizon trounces competition
- Smartphone smackdown: Storm vs. iPhone
- FBI warns of holiday cyber scams
IBM has issued a warning to customers that security fixes should be installed for two vulnerabilities in the IBM Tivoli Storage Manager (TSM) backup software client. The security holes could allow a buffer overrun attack or enable unauthorized access to stored data, IBM said.
In the alert advisory issued late last week, IBM security researchers said that three client interfaces of TSM -- the Web client GUI, the backup-archive client scheduling tool, and the backup-archive server-initiated prompted scheduling product -- could be impacted by the vulnerabilities. No other TSM client tools are affected, IBM said.
By taking advantage of the TSM vulnerabilities, hackers could subvert the backup software's code in two ways, IBM said: A buffer overrun could crash an operating system, or the exploit could open the door for injection code execution. The vulnerability could also allow someone to take advantage of server-initiated prompted scheduling to gain access to private information.
According to IBM, the vulnerabilities are in TSM Express backup clients, and TSM v5.1, v5.2, v5.3 and v5.4 backup-archive clients.
Links within IBM's security advisory provide update packages for immediate download and instructions for installation.
IBM is recommending that customers refrain from using the affected clients until the fixes are installed.
Rss FeedRss Feed
| NetworkWorld, Inc. | About Network World, Inc. | Advertise | Careers | Contact us | Terms of Service/Privacy | Reprints and links | Partnerships | Press room | Subscribe to NW |
| IDG, Inc. | CIO | Computerworld | CSO | Demo | GamePro | Games.net | IDGconnect.com | IDG World Expo | Infoworld | JavaWorld.com | LinuxWorld.com | MacUser | Macworld | PC World | Playlistmag.com | The Industry Standard | IDG List Services | IDG TechNetwork |
 The Leader in Network Knowledge© 1994-2008 Network World, Inc. All rights reserved. |
Partner Content
Brilliantly simple security and control solutions for email, web and endpoint
www.sophos.com
Stopping data leakage
Learn how to exploit your current security investment to control the information that flows into, through and out of your network.
Download the white paper.
Why detection rates aren't enough
Evaluating endpoint security products is a time-consuming and daunting task. Learn the six critical questions you need to ask prospective vendors to get the right endpoint solution.
Download the white paper.
Applications: taking back control
Employees installing unauthorized applications is a growing threat to business security and productivity. Cost-effectively reduce this threat by integrating control into your malware protection.
Learn more today.
Comment