CVE-2008-4563: IBM Tivoli Storage Manager

High severity, CVSS 10.0. EPSS: 29% chance of exploitation in the next 30 days.

Heap-based buffer overflow in adsmdll.dll 5.3.7.7296, as used by the daemon (dsmsvc.exe) in the backup server in IBM Tivoli Storage Manager (TSM) Express 5.3.7.3 and earlier and TSM 5.2, 5.3 before 5.3.6.0, and 5.4.0.0 through 5.4.4.0, allows remote attackers to execute arbitrary code via a crafted length value.

Affected products

• IBM Tivoli Storage Manager: version 5.2 only; version 5.3 only; version 5.3.0 only; version 5.3.1 only; version 5.3.2 only; version 5.3.2.4 only; …
• IBM Tivoli Storage Manager Express: version 5.3 only; version 5.3.3.0 only; version 5.3.6.4 only; version 5.3.7.3 only

Published 2009-03-11. Last modified 2026-06-16.