[email protected]CVE-2008-1704

HistoryApr 11, 2008 - 10:05 a.m.

CVE-2008-1704

2008-04-1110:05:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-1704

tibco software

enterprise message service

ems

iprocess engine

buffer overflow

remote code execution

security vulnerability

8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.104 Low

EPSS

Percentile

95.0%

JSON

Multiple buffer overflows in TIBCO Software Enterprise Message Service (EMS) before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server.

CPENameOperatorVersion
tibco:enterprise_message_servicetibco enterprise message servicele4.4.2
tibco:iprocess_enginetibco iprocess engineeq10.6.0
tibco:enterprise_message_servicetibco enterprise message serviceeq4.4.1
tibco:enterprise_message_servicetibco enterprise message serviceeq4.4.0
tibco:enterprise_message_servicetibco enterprise message serviceeq4.1.0
tibco:enterprise_message_servicetibco enterprise message serviceeq4.2.0
tibco:enterprise_message_servicetibco enterprise message serviceeq4.0.0
tibco:enterprise_message_servicetibco enterprise message serviceeq4.3.0
tibco:iprocess_enginetibco iprocess engineeq10.6.1

CPE	Name	Operator	Version
tibco:enterprise_message_service	tibco enterprise message service	le	4.4.2
tibco:iprocess_engine	tibco iprocess engine	eq	10.6.0
tibco:enterprise_message_service	tibco enterprise message service	eq	4.4.1
tibco:enterprise_message_service	tibco enterprise message service	eq	4.4.0
tibco:enterprise_message_service	tibco enterprise message service	eq	4.1.0
tibco:enterprise_message_service	tibco enterprise message service	eq	4.2.0
tibco:enterprise_message_service	tibco enterprise message service	eq	4.0.0
tibco:enterprise_message_service	tibco enterprise message service	eq	4.3.0
tibco:iprocess_engine	tibco iprocess engine	eq	10.6.1

References

secunia.com/advisories/29775

www.securityfocus.com/bid/28717

www.securitytracker.com/id?1019826

www.tibco.com/resources/mk/ems_security_advisory_20080409.txt

www.vupen.com/english/advisories/2008/1190/references

exchange.xforce.ibmcloud.com/vulnerabilities/41761

8 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.104 Low

EPSS

Percentile

95.0%

JSON

Related for CVE-2008-1704

cvelist1 prion1 seebug1