Description
The server in IBM Tivoli Storage Manager (TSM) 4.2.x on MVS, 5.1.9.x before 5.1.9.1, 5.1.x before 5.1.10, 5.2.2.x before 5.2.2.3, 5.2.x before 5.2.3, 5.3.x before 5.3.0, and 6.x before 6.1, when the HTTP communication method is enabled, allows remote attackers to cause a denial of service (daemon crash or hang) via unspecified HTTP traffic, as demonstrated by the IBM port scanner 1.3.1.
References
- ADV-2009-0881 vdb-entry
- http://www-01.ibm.com/support/docview.wss?uid=swg21375360
- 34285 vdb-entry
- IC39395 vendor-advisory
- http://www-01.ibm.com/support/docview.wss?uid=swg21246076
- 34498 third-party-advisory
- 1021946 vdb-entry
- tsm-http-dos(49535) vdb-entry