CVE-2006-6309: IBM Tivoli Storage Manager

High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Multiple array index errors in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to read arbitrary memory locations and cause a denial of service (crash) via a large index value in unspecified messages, a different issue than CVE-2006-5855.

Affected products

• IBM Tivoli Storage Manager: up to and including 5.2.9; version 5.3.0 only; version 5.3.1 only; version 5.3.2 only; version 5.3.3 only

Published 2006-12-06. Last modified 2026-06-16.