CVE-2013-6335

The Backup-Archive client in IBM Tivoli Storage Manager (TSM) for Space Management 5.x and 6.x before 6.2.5.3, 6.3.x before 6.3.2, 6.4.x before 6.4.2, and 7.1.x before 7.1.0.3 on Linux and AIX, and 5.x and 6.x before 6.1.5.6 on Solaris and HP-UX, does not preserve file permissions across backup and restore operations, which allows local users to bypass intended access restrictions via standard filesystem operations.

• CWE-281

• http://secunia.com/advisories/60482Third Party Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC96095Broken Link
• http://www-01.ibm.com/support/docview.wss?uid=swg21680453Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89054VDB Entry, Vendor Advisory
• http://secunia.com/advisories/60482Third Party Advisory
• http://www-01.ibm.com/support/docview.wss?uid=swg1IC96095Broken Link
• http://www-01.ibm.com/support/docview.wss?uid=swg21680453Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/89054VDB Entry, Vendor Advisory

Published

Aug 26, 2014

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2013-6329IBM Global Security Kit (aka GSKit), as used in Content Mana…
• CVE-2013-6330IBM WebSphere Application Server 7.x before 7.0.0.31, when s…
• CVE-2013-6331SQL injection vulnerability in IBM Algo One, as used in Meta…
• CVE-2013-6332Unrestricted file upload vulnerability in IBM Algo One UDS 4…
• CVE-2013-6333Cross-site scripting (XSS) vulnerability in IBM Algo One, as…
• CVE-2013-6334IBM Atlas eDiscovery Process Management 6.0.1.5 and earlier …
• CVE-2013-6336The ieee802154_map_rec function in epan/dissectors/packet-ie…
• CVE-2013-6337Unspecified vulnerability in the NBAP dissector in Wireshark…
• CVE-2013-6338The dissect_sip_common function in epan/dissectors/packet-si…
• CVE-2013-6339The dissect_openwire_type function in epan/dissectors/packet…
• CVE-2013-6340epan/dissectors/packet-tcp.c in the TCP dissector in Wiresha…
• CVE-2013-6341SQL injection vulnerability in Dokeos 2.2 RC2 and earlier al…