Lucene search

[email protected]CVE-2008-1703

HistoryApr 11, 2008 - 10:05 a.m.

CVE-2008-1703

2008-04-1110:05:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-1703

buffer overflow

tibco software rendezvous

remote code execution

nvd

vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.149 Low

EPSS

Percentile

95.8%

JSON

Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message.

Affected configurations

NVD

Node

tibcoadapter_files_z_osRange≤4.4.1

tibcohawkRange≤4.8.0

tibcoiprocess_engineMatch10.3.0

tibcoiprocess_engineMatch10.3.1

tibcoiprocess_engineMatch10.3.2

tibcoiprocess_engineMatch10.3.3

tibcoiprocess_engineMatch10.3.4

tibcoiprocess_engineMatch10.3.5

tibcoiprocess_engineMatch10.4

tibcoiprocess_engineMatch10.4.1

tibcoiprocess_engineMatch10.5

tibcoiprocess_engineMatch10.6

tibcoiprocess_engineMatch10.6.0

tibcoiprocess_engineMatch10.6.1

tibcorendezvousRange≤8.10

tibcorendezvous_datasecurityRange≤2.1.6

tibcorendezvous_txRange≤2.04

tibcoruntime_agentRange≤5.5.4

tibcosubstantiation_esRange≤2.4.0

CPENameOperatorVersion
tibco:adapter_files_z_ostibco adapter files z osle4.4.1
tibco:hawktibco hawkle4.8.0
tibco:iprocess_enginetibco iprocess engineeq10.3.0
tibco:iprocess_enginetibco iprocess engineeq10.3.1
tibco:iprocess_enginetibco iprocess engineeq10.3.2
tibco:iprocess_enginetibco iprocess engineeq10.3.3
tibco:iprocess_enginetibco iprocess engineeq10.3.4
tibco:iprocess_enginetibco iprocess engineeq10.3.5
tibco:iprocess_enginetibco iprocess engineeq10.4
tibco:iprocess_enginetibco iprocess engineeq10.4.1

CPE	Name	Operator	Version
tibco:adapter_files_z_os	tibco adapter files z os	le	4.4.1
tibco:hawk	tibco hawk	le	4.8.0
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.0
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.1
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.2
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.3
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.4
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.5
tibco:iprocess_engine	tibco iprocess engine	eq	10.4
tibco:iprocess_engine	tibco iprocess engine	eq	10.4.1

Rows per page:

1-10 of 191

References

secunia.com/advisories/29774

www.osvdb.org/44269

www.securityfocus.com/bid/28717

www.securitytracker.com/id?1019826

www.tibco.com/resources/mk/rendezvous_security_advisory_20080409.txt

www.vupen.com/english/advisories/2008/1189/references

www.vupen.com/english/advisories/2008/1190/references

exchange.xforce.ibmcloud.com/vulnerabilities/41760

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.7 High

AI Score

Confidence

Low

0.149 Low

EPSS

Percentile

95.8%

JSON

Related for CVE-2008-1703

prion1 cvelist1 nvd1 seebug1