VIR Vulnerability Intelligence Relay

CVE-2014-0876

low
Published 2014-08-17 · Modified 2026-05-06
CVSS v3
—
CVSS v2
2.1
VIR risk
2.1

Description

Buffer overflow in the Java GUI Configuration Wizard and Preferences Editor in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.x and 6.x before 6.2.5.2, 6.3.x before 6.3.2, and 6.4.x before 6.4.2 on Windows and OS X allows local users to cause a denial of service (application crash or hang) via unspecified vectors.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg21673318

vendor Authored 2026-05-27

Vendor advisory: psirt@us.ibm.com — http://www-01.ibm.com/support/docview.wss?uid=swg1IC95875

OS impact
OSVersionStatusFixed in
macos macosnot-affected

Application impact
VendorProductVersionsFixed
ibm ibmtivoli_storage_manager5.4.0
ibm ibmtivoli_storage_manager5.5.0
ibm ibmtivoli_storage_manager6.1.0
ibm ibmtivoli_storage_manager6.2.0
ibm ibmtivoli_storage_manager6.3.0
ibm ibmtivoli_storage_manager6.4.0

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.