PT-2006-3748 · Tibco · Hawk+2

Andrés Tarascó Acuña · Publicado 2006-06-05 · Atualizado 2017-07-20 · CVE-2006-2830

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TIBCO Rendezvous versions prior to 7.5.1 TIBCO Runtime Agent (TRA) versions prior to 5.4 Hawk versions prior to 4.6.1

Description A buffer overflow issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface.

Recommendations For TIBCO Rendezvous versions prior to 7.5.1, update to version 7.5.1 or later. For TIBCO Runtime Agent (TRA) versions prior to 5.4, update to version 5.4 or later. For Hawk versions prior to 4.6.1, update to version 4.6.1 or later.

Correção

Identificadores relacionados

CVE-2006-2830

Produtos afetados

Hawk

Tibco Rendezvous

Tibco Runtime Agent

Referências · 8

• http://secunia.com/advisories/20452 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2006-2830 · Nota de Segurança
• http://securityfocus.com/bid/18301 · Nota
• http://tibco.com/resources/mk/rendezvous_security_advisory.txt · Aviso do Fabricante
• http://securitytracker.com/id?1016145 · Nota
• http://kb.cert.org/vuls/id/999884 · Correção
• http://vupen.com/english/advisories/2006/2155 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26939 · Nota