CVE-2006-5855: ibm tivoli_storage_manager
Vulnerability summary
CVE-2006-5855 is a high (CVSS 10.0) vulnerability in ibm tivoli_storage_manager. EPSS estimates a 26.68% chance of exploitation in the next 30 days, higher than 98% of scored vulnerabilities.
Timeline
- 06-12-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
26.68%
Chance of exploitation in the next 30 days
Percentile
98%
Versus all other CVEs
30-day change
No change 0.00 pp
From 26.68% on 22-09-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Ibm1 product
- tivoli_storage_manager5.2.7 | 5.2.8 | 5.3.0 | 5.3.1 | 5.3.2 | 5.3.3
1 vendor · 1 product