Lucene search

[email protected]CVE-2008-3338

HistoryAug 13, 2008 - 10:41 p.m.

CVE-2008-3338

2008-08-1322:41:00

CWE-119

[email protected]

web.nvd.nist.gov

cve-2008-3338

tibco hawk

buffer overflows

remote code execution

security vulnerability

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

93.1%

JSON

Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.

Affected configurations

NVD

Node

tibcohawkRange≤4.8.0

tibcohawkMatch4.6.0

tibcohawkMatch4.6.1

tibcohawkMatch4.7

tibcoiprocess_engineMatch10.3.0

tibcoiprocess_engineMatch10.3.1

tibcoiprocess_engineMatch10.3.2

tibcoiprocess_engineMatch10.3.3

tibcoiprocess_engineMatch10.3.4

tibcoiprocess_engineMatch10.3.5

tibcoiprocess_engineMatch10.4

tibcoiprocess_engineMatch10.4.1

tibcoiprocess_engineMatch10.5

tibcoiprocess_engineMatch10.6

tibcoiprocess_engineMatch10.6.0

tibcoiprocess_engineMatch10.6.1

tibcoiprocess_engineMatch10.6.2

tibcoiprocess_engineMatch11.0

tibcomainframe_service_trackerRange≤1.0

tibcoruntime_agentRange≤5.5.4

tibcoruntime_agentMatch5.3

tibcoruntime_agentMatch5.4.0

CPENameOperatorVersion
tibco:hawktibco hawkle4.8.0
tibco:hawktibco hawkeq4.6.0
tibco:hawktibco hawkeq4.6.1
tibco:hawktibco hawkeq4.7
tibco:iprocess_enginetibco iprocess engineeq10.3.0
tibco:iprocess_enginetibco iprocess engineeq10.3.1
tibco:iprocess_enginetibco iprocess engineeq10.3.2
tibco:iprocess_enginetibco iprocess engineeq10.3.3
tibco:iprocess_enginetibco iprocess engineeq10.3.4
tibco:iprocess_enginetibco iprocess engineeq10.3.5

CPE	Name	Operator	Version
tibco:hawk	tibco hawk	le	4.8.0
tibco:hawk	tibco hawk	eq	4.6.0
tibco:hawk	tibco hawk	eq	4.6.1
tibco:hawk	tibco hawk	eq	4.7
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.0
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.1
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.2
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.3
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.4
tibco:iprocess_engine	tibco iprocess engine	eq	10.3.5

Rows per page:

1-10 of 221

References

secunia.com/advisories/31618

www.securityfocus.com/bid/30836

www.tibco.com/resources/mk/hawk_security_advisory_20080729.txt

www.vupen.com/english/advisories/2008/2448

exchange.xforce.ibmcloud.com/vulnerabilities/44604

7.7 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.053 Low

EPSS

Percentile

93.1%

JSON

Related for CVE-2008-3338

nvd1 tibco1 prion1 cvelist1