PT-2007-5356 · Tibco · Tibco Rendezvous

Published 2007-08-03 · Updated 2011-03-08 · CVE-2007-4160

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions TIBCO Rendezvous (RV) version 7.5.2

Description The default configuration of TIBCO Rendezvous (RV) clients might make it easier for remote attackers to capture message contents by sniffing the network, as it uses a multicast group as the destination for a network message when the -no-multicast option is omitted.

Recommendations For TIBCO Rendezvous (RV) version 7.5.2, consider including the -no-multicast option to prevent the use of a multicast group as the destination for network messages, thereby minimizing the risk of message capture by remote attackers.

Exploit

Fix

Related Identifiers

CVE-2007-4160

Affected Products

Tibco Rendezvous

References · 6

• 🔥 http://irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-4160 · Security Note
• http://vupen.com/english/advisories/2007/2814 · Note
• http://osvdb.org/46992 · Note
• http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0620.html · Note
• http://securitytracker.com/id?1018512 · Note