PT-2008-3248 · Tibco · Tibco Enterprise Message Service+1

Published 2008-04-11 · Updated 2017-08-08 · CVE-2008-1704

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions TIBCO Software Enterprise Message Service (EMS) versions prior to 4.4.3 TIBCO Software iProcess Engine versions 10.6.0 through 10.6.1

Description The issue allows remote attackers to execute arbitrary code via a crafted message to the EMS server, due to multiple buffer overflows.

Recommendations For TIBCO Software Enterprise Message Service (EMS) versions prior to 4.4.3, update to version 4.4.3 or later. For TIBCO Software iProcess Engine versions 10.6.0 through 10.6.1, update to a version outside of the affected range.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2008-1704

Affected Products

Tibco Enterprise Message Service

Tibco Iprocess Engine

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2008-1704 · Security Note
• http://secunia.com/advisories/29775 · Vendor Advisory
• http://securityfocus.com/bid/28717 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41761 · Note
• http://tibco.com/resources/mk/ems_security_advisory_20080409.txt · Note
• http://securitytracker.com/id?1019826 · Note
• http://vupen.com/english/advisories/2008/1190/references · Note