PT-2007-5356 · Tibco · Tibco Rendezvous

Publicado 2007-08-03 · Atualizado 2011-03-08 · CVE-2007-4160

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TIBCO Rendezvous (RV) version 7.5.2

Description The default configuration of TIBCO Rendezvous (RV) clients might make it easier for remote attackers to capture message contents by sniffing the network, as it uses a multicast group as the destination for a network message when the -no-multicast option is omitted.

Recommendations For TIBCO Rendezvous (RV) version 7.5.2, consider including the -no-multicast option to prevent the use of a multicast group as the destination for network messages, thereby minimizing the risk of message capture by remote attackers.

Exploit

Correção

Identificadores relacionados

CVE-2007-4160

Produtos afetados

Tibco Rendezvous

Referências · 6

• 🔥 http://irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf · Exploit
• http://vupen.com/english/advisories/2007/2814 · Nota
• http://osvdb.org/46992 · Nota
• http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html · Nota
• http://securitytracker.com/id?1018512 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4160 · Nota de Segurança