Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

A local attacker can load a library before the usage of IBM TSM,
in order to escalate his privileges.

Impacted products: Tivoli Storage Manager

Severity: 2/4

Creation date: 03/02/2015

DESCRIPTION OF THE VULNERABILITY

The IBM Tivoli Storage Manager client runs as root.

However, a local attacker can force it to load a malicious shared
library.

A local attacker can therefore load a library before the usage of
IBM TSM, in order to escalate his privileges.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/IBM-TSM-privilege-escalation-via-DSO-16103