CVE-2009-1520: IBM Tivoli Storage Manager Client

High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days.

Buffer overflow in the Web GUI in the IBM Tivoli Storage Manager (TSM) client 5.1.0.0 through 5.1.8.2, 5.2.0.0 through 5.2.5.3, 5.3.0.0 through 5.3.6.4, 5.4.0.0 through 5.4.2.6, and 5.5.0.0 through 5.5.1.17 allows attackers to cause a denial of service (application crash) or execute arbitrary code via unspecified vectors.

Affected products

• IBM Tivoli Storage Manager Client: version 5.1 only; version 5.1.8.0 only; version 5.1.8.2 only; version 5.2 only; version 5.2.5.1 only; version 5.2.5.2 only; …
• IBM Tivoli Storage Manager Express: version 5.3 only; version 5.3.3.0 only; version 5.3.6.4 only

Published 2009-05-05. Last modified 2026-06-16.