CWE Code: 119
Vulnerability Type: privilege_escalation
CVSS Score: 7.2
CWE Name:  Improper Restriction of Operations within the Bounds of a Memory Buffer
Summary: buffer overflow in the alternate data stream (aka ads or named stream) functionality in the backup-archive client in ibm tivoli storage manager (tsm) before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6.1.4, and 6.2.x before 6.2.2 on windows allows local users to gain privileges via unspecified vectors.
Access Authentication: NONE
Access Complexity: LOW
Access Vector: LOCAL
Impact (C/I/A): COMPLETE/COMPLETE/COMPLETE
Published Date: 2011-07-17
Last Modified Date: 2011-07-19