CVE-2002-0541

Buffer overflow in Tivoli Storage Manager TSM (1) Server or Storage Agents 3.1 through 5.1, and (2) the TSM Client Acceptor Service 4.2 and 5.1, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long HTTP GET request to port 1580 or port 1581.

• http://archives.neohapsis.com/archives/bugtraq/2002-04/0126.html
• http://online.securityfocus.com/archive/1/267143Patch, Vendor Advisory
• http://www.iss.net/security_center/static/8817.phpPatch, Vendor Advisory
• http://www.iss.net/security_center/static/8825.php
• http://www.securityfocus.com/bid/4492
• http://www.securityfocus.com/bid/4500Patch, Vendor Advisory
• http://www.tivoli.com/support/storage_mgr/flash_httpport.htmlPatch, Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2002-04/0126.html
• http://online.securityfocus.com/archive/1/267143Patch, Vendor Advisory
• http://www.iss.net/security_center/static/8817.phpPatch, Vendor Advisory
• http://www.iss.net/security_center/static/8825.php
• http://www.securityfocus.com/bid/4492
• http://www.securityfocus.com/bid/4500Patch, Vendor Advisory
• http://www.tivoli.com/support/storage_mgr/flash_httpport.htmlPatch, Vendor Advisory

Published

Jul 3, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-0535Cross-site scripting vulnerabilities in PostBoard 2.0.1 and …
• CVE-2002-0536PHPGroupware 0.9.12 and earlier, when running with the magic…
• CVE-2002-0537The admin.html file in StepWeb Search Engine (SWS) 2.5 store…
• CVE-2002-0538FTP proxy in Symantec Raptor Firewall 6.5.3 and Enterprise 7…
• CVE-2002-0539Demarc PureSecure 1.05 allows remote attackers to gain admin…
• CVE-2002-0540Nortel CVX 1800 is installed with a default "public" communi…
• CVE-2002-0542mail in OpenBSD 2.9 and 3.0 processes a tilde (~) escape cha…
• CVE-2002-0543Directory traversal vulnerability in Aprelium Abyss Web Serv…
• CVE-2002-0544Aprelium Abyss Web Server (abyssws) before 1.0.3 stores the …
• CVE-2002-0545Cisco Aironet before 11.21 with Telnet enabled allows remote…
• CVE-2002-0546Cross-site scripting vulnerability in the mini-browser for W…
• CVE-2002-0547Buffer overflow in the mini-browser for Winamp 2.79 and earl…