PT-2008-4743 · Tibco · Tibco Hawk Ami C Library+5

Publicado 2008-08-13 · Atualizado 2017-08-08 · CVE-2008-3338

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO Hawk versions prior to 4.8.1 TIBCO Runtime Agent (TRA) versions prior to 5.6.0 TIBCO iProcess Engine versions 10.3.0 through 10.6.2 and 11.0.0 TIBCO Mainframe Service Tracker versions prior to 1.1.0

Description The issue is related to multiple buffer overflows in the TIBCO Hawk AMI C library and Hawk HMA, which could allow remote attackers to execute arbitrary code via a crafted message.

Recommendations For TIBCO Hawk versions prior to 4.8.1, update to version 4.8.1 or later. For TIBCO Runtime Agent (TRA) versions prior to 5.6.0, update to version 5.6.0 or later. For TIBCO iProcess Engine versions 10.3.0 through 10.6.2 and 11.0.0, update to a version outside of the affected range. For TIBCO Mainframe Service Tracker versions prior to 1.1.0, update to version 1.1.0 or later.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2008-3338

Produtos afetados

Hawk Hma

Tibco Hawk

Tibco Hawk Ami C Library

Tibco Mainframe Service Tracker

Tibco Runtime Agent

Tibco Iprocess Engine

Referências · 6

• http://securityfocus.com/bid/30836 · Nota
• http://tibco.com/resources/mk/hawk_security_advisory_20080729.txt · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-3338 · Nota de Segurança
• http://secunia.com/advisories/31618 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44604 · Nota
• http://vupen.com/english/advisories/2008/2448 · Nota