PT-2008-3248 · Tibco · Tibco Enterprise Message Service+1

Publicado 2008-04-11 · Atualizado 2017-08-08 · CVE-2008-1704

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO Software Enterprise Message Service (EMS) versions prior to 4.4.3 TIBCO Software iProcess Engine versions 10.6.0 through 10.6.1

Description The issue allows remote attackers to execute arbitrary code via a crafted message to the EMS server, due to multiple buffer overflows.

Recommendations For TIBCO Software Enterprise Message Service (EMS) versions prior to 4.4.3, update to version 4.4.3 or later. For TIBCO Software iProcess Engine versions 10.6.0 through 10.6.1, update to a version outside of the affected range.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-1704

Produtos afetados

Tibco Enterprise Message Service

Tibco Iprocess Engine

Referências · 7

• http://securityfocus.com/bid/28717 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1704 · Nota de Segurança
• http://secunia.com/advisories/29775 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41761 · Nota
• http://tibco.com/resources/mk/ems_security_advisory_20080409.txt · Nota
• http://securitytracker.com/id?1019826 · Nota
• http://vupen.com/english/advisories/2008/1190/references · Nota