PT-2006-3748 · Tibco · Hawk+2

Andrés Tarascó Acuña · Published 2006-06-05 · Updated 2017-07-20 · CVE-2006-2830

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions TIBCO Rendezvous versions prior to 7.5.1 TIBCO Runtime Agent (TRA) versions prior to 5.4 Hawk versions prior to 4.6.1

Description A buffer overflow issue allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface.

Recommendations For TIBCO Rendezvous versions prior to 7.5.1, update to version 7.5.1 or later. For TIBCO Runtime Agent (TRA) versions prior to 5.4, update to version 5.4 or later. For Hawk versions prior to 4.6.1, update to version 4.6.1 or later.

Fix

Related Identifiers

CVE-2006-2830

Affected Products

Hawk

Tibco Rendezvous

Tibco Runtime Agent

References · 8

• http://secunia.com/advisories/20452 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2830 · Security Note
• http://tibco.com/resources/mk/rendezvous_security_advisory.txt · Vendor Advisory
• http://kb.cert.org/vuls/id/999884 · Patch
• http://securityfocus.com/bid/18301 · Note
• http://securitytracker.com/id?1016145 · Note
• http://vupen.com/english/advisories/2006/2155 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26939 · Note