CVE-2010-4605
Status: ModifiedMedium (6.6)—
Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors.
CVSS
- Version: 2.0
- Vector: AV:L/AC:L/Au:N/C:N/I:C/A:C
- Base score: 6.6
Exploitation probability (EPSS)
- Probability of exploitation in the next 30 days: 0.40%
- Percentile among all scored CVEs: 32
- Score date: 10/7/2026
EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).
Affected technologies (1)
CWEs
- NVD-CWE-noinfo
References
- http://secunia.com/advisories/42639
- http://securitytracker.com/id?1024901
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686
- http://www.ibm.com/support/docview.wss?uid=swg21454745
- http://www.vupen.com/english/advisories/2010/3251
- http://secunia.com/advisories/42639
- http://securitytracker.com/id?1024901
- http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686
- http://www.ibm.com/support/docview.wss?uid=swg21454745
- http://www.vupen.com/english/advisories/2010/3251
Raw JSON (NVD)
Show
{
"id": "CVE-2010-4605",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.6,
"accessVector": "LOCAL",
"vectorString": "AV:L/AC:L/Au:N/C:N/I:C/A:C",
"authentication": "NONE",
"integrityImpact": "COMPLETE",
"accessComplexity": "LOW",
"availabilityImpact": "COMPLETE",
"confidentialityImpact": "NONE"
},
"acInsufInfo": false,
"impactScore": 9.2,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 3.9,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-12-29T18:00:03.820",
"references": [
{
"url": "http://secunia.com/advisories/42639",
"tags": [
"Vendor Advisory",
"URL Repurposed"
],
"source": "cve@mitre.org"
},
{
"url": "http://securitytracker.com/id?1024901",
"tags": [
"Third Party Advisory",
"VDB Entry",
"URL Repurposed"
],
"source": "cve@mitre.org"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21454745",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.vupen.com/english/advisories/2010/3251",
"tags": [
"Vendor Advisory",
"URL Repurposed"
],
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/42639",
"tags": [
"Vendor Advisory",
"URL Repurposed"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://securitytracker.com/id?1024901",
"tags": [
"Third Party Advisory",
"VDB Entry",
"URL Repurposed"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www-01.ibm.com/support/docview.wss?uid=swg1IC66686",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.ibm.com/support/docview.wss?uid=swg21454745",
"tags": [
"Broken Link",
"Third Party Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.vupen.com/english/advisories/2010/3251",
"tags": [
"Vendor Advisory",
"URL Repurposed"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "NVD-CWE-noinfo"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Unspecified vulnerability in the backup-archive client in IBM Tivoli Storage Manager (TSM) 5.3.x before 5.3.6.10, 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows local users to overwrite arbitrary files via unknown vectors."
},
{
"lang": "es",
"value": "Vulnerabilidad no especificada en el cliente de copia de seguridad de archivos en IBM Tivoli Storage Manager (TSM) v5.3.x anteriores a v5.3.6.10, v5.4.3.4 anterior a v5.4.x, v5.5.x anteriores a v5.5.3, v6.1.x anteriores a v6.1.4, y v6.2.x anteirores a v6.2.2 en Unix y Linux permite a usuarios locales sobrescribir archivos de su elección a través de vectores desconocidos."
}
],
"lastModified": "2026-06-16T23:25:09.747",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A263333E-DB86-41BE-A508-731079429E62"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4E5F0611-DD8F-42A2-AFD7-1BCBD38BAB4F"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25121FC4-9EE2-44AE-BEB3-02C3AB38DB61"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "93FCB242-C35B-4CDB-AE62-3CA5D312586B"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "70016926-5776-4A04-8D55-5CA12D1DA9B4"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "930B5AE2-CA47-47D7-96DE-F2B9F70337C8"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3FAA5227-C1F5-48C1-A207-096F228E305E"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74B38E6A-86AA-4C35-AF3F-7F77DF647235"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "271A29AC-0890-495D-8DF7-2530CEAF6C2D"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "43BE5332-C982-440A-A7AA-03B83415B444"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74E095D6-D6C9-4E21-9CBA-508D043C4286"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EFD434E9-6D0E-4FDB-A39A-D9FAC7E825C0"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.3.6.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "22F74B9A-D31E-43E3-8A29-BFD09A9442F4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "11E968D1-8198-4686-BFDD-8499CB435B56"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "40A8E0C4-8509-4372-99C7-CFBA2100AEBE"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5CBC191E-0CE6-4D9C-A75B-E3484AC3B4DE"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F956AF3F-0BDF-4F4B-AB29-418C39BEC8D5"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0642EDE5-7EBF-4FA3-9432-F82FE76EF9EB"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.4.2.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F4C19266-CDED-4DC0-8B50-560BA3B5DAC4"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B0ADAA69-B258-4666-9AB7-7965429EA497"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F4722BA-186A-4999-965E-ED5FA72D4BD0"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:5.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D9FF105A-6B8E-4849-875F-FD87EC9291E3"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76EC7D2D-4B0A-4CDF-A523-85ABEF05D211"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C7DD9CE-0E95-45BB-9BB5-07652C9FD6C1"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6F3F3288-4280-43DA-B6E4-8240137105AD"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "90CAA216-D0B3-4ECB-8BBE-5288DE590DE6"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "45172E20-5E12-435E-815F-D543C9B6BD41"
},
{
"criteria": "cpe:2.3:a:ibm:tivoli_storage_manager:6.2.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9625017C-311D-423A-BFF8-AEB4CE7766FE"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "703AF700-7A70-47E2-BC3A-7FD03B3CA9C1"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}