CVE-2006-5855
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4...
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.
Exploit likelihood
What each source reports
NVD Score used
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.
- Record
CVE-2006-5855- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.
- Record
CVE-2006-5855- Updated
- 2026-11-02
EUVDEUVD-2006-5839 No score
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.
- Record
EUVD-2006-5839- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-7r4r-3fxw-5p8q No score
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4...
Multiple buffer overflows in IBM Tivoli Storage Manager (TSM) before 5.2.9 and 5.3.x before 5.3.4 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in (1) the language field at logon that begins with a 0x18 byte, (2) two unspecified parameters to the SmExecuteWdsfSession function, and (3) the contact field in an open registration message.
- Record
GHSA-7r4r-3fxw-5p8q- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-5855 is a high vulnerability (CVSS 10.0) in Ibm Tivoli Storage Manager, published December 6, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 28.2%, the 98th percentile. No source names a fixed version.
References
www-1.ibm.com/support/docview.wss?uid=swg21250261
tippingpoint.com/security/advisories/TSRT-06-14.html
exchange.xforce.ibmcloud.com/vulnerabilities/30702
kb.cert.org/vuls/id/350625
securityreason.com/securityalert/1979
Show 11 moreShow less
vupen.com/english/advisories/2006/4856
securityfocus.com/bid/21440
securitytracker.com/id?1017333
secunia.com/advisories/23177
nvd.nist.gov/vuln/detail/CVE-2006-5855
github.com/advisories/GHSA-7r4r-3fxw-5p8q