Code injection

Unspecified vulnerability in System Administration Manager SAM in EMS before A.04.20.11.0401 on HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

CVE-2011-4159

Unspecified vulnerability in System Administration Manager SAM in EMS before A.04.20.11.0401 on HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

CVE-2011-4159

HP-UX SAM vulnerability (CVE-2011-4159) affects HP-UX B.11.11, B.11.23 and B.11.31 with EMS prior to A.04.20.11.04_01. Local privilege escalation via unspecified vectors is described; HP’s Security Bulletin HPSBUX02724 rev.2 lists affected EMS releases and unreleased official patches in the form ...

CVE-2011-4159: Undefined Security Weakness

Unspecified vulnerability in System Administration Manager SAM in EMS before A.04.20.11.0401 on HP HP-UX B.11.11, B.11.23, and B.11.31 allows local users to gain privileges via unknown vectors...

PT-2011-4050

Name of the Vulnerable Software and Affected Versions Cisco Unified Service Monitor versions prior to 8.6 CiscoWorks LAN Management Solution versions 3.x and 4.x prior to 4.1 EMC Ionix Application Connectivity Monitor Ionix ACM version 2.3 and earlier EMC Ionix Adapter for Alcatel-Lucent 5620 SAM...

How to Adjust Collector Heartbeat Timeout

Purpose This article provides information regarding the configuration of the Collector Heartbeat setting, which determines how long the collector can go between heartbeats before being considered unreachable. Solution Configuration of the CollectorHeartbeatTimeout value is documented in the Veeam...

SCADA Trojans: Attacking the Grid + Advantech vulnerabilities

Hi! You can download the slides of the research I was presenting at RootedCon'11 in Madrid "SCADA Trojans: Attacking the grid". A journey into attacking the power grid. I presented: - 0days in Advantech/BroadWin WebAccess SCADA product - Weak Design/Vulnerabilities in CSE-Semaphore TBOX RTUs -...

CVE-2011-0649

TIBCO CVE-2011-0649 affects Rendezvous and Enterprise Message Service components on Unix: Rendezvous Routing Daemon (rvrd), Rendezvous Secure Daemon (rvsd), Rendezvous Secure Routing Daemon (rvsrd), and EMS Server (tibemsd) across Rendezvous 8.2.1–8.3.0, EMS 5.1.0–6.0.0, TRA 5.6.2–5.7.0, Silver B...

Unfixed XSS vulnerability at www.ems.com.cn

Security researcher AndMyXSS, has submitted on 19/10/2010 a cross-site-scripting XSS vulnerability affecting www.ems.com.cn, which at the time of submission ranked 1303 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 10/01/2012. It is currently...

TIBCO多个产品远程溢出漏洞

BUGTRAQ ID: 28717 CVECAN ID: CVE-2008-1703,CVE-2008-1704 TIBCO企业消息服务（EMS）是基于标准的消息传送平台，Rendezvous是一套帮助用户快速构建和部署大规模分布式应用的中间件。 TIBCO EMS服务器（tibemsd）在处理某些入站消息时存在缓冲区溢出漏洞，可能导致执行任意指令、拒绝服务或泄露敏感信息。 Rendezvous的以下组件在处理入站消息时也存在缓冲区溢出漏洞，可能导致执行任意指令、拒绝服务或泄露敏感信息。 TIBCO Rendezvous Daemon rvd TIBCO Rendezvous Routi...

CVE-2008-1704

Multiple buffer overflows in TIBCO Software Enterprise Message Service EMS before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server...

CVE-2008-1704

TIBCO EMS and related Rendezvous components suffer remote buffer overflow vulnerabilities. Specifically, EMS before 4.4.3 and iProcess Engine 10.6.0–10.6.1 are affected, enabling remote code execution via crafted inbound messages to tibemsd. The Seebug/Nessus records also list multiple Rendezvous...

CVE-2008-1704: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in TIBCO Software Enterprise Message Service EMS before 4.4.3, and iProcess Engine 10.6.0 through 10.6.1, allow remote attackers to execute arbitrary code via a crafted message to the EMS server...

Design/Logic Flaw

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service EMS 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted requests that control loop operations related to memory...

Design/Logic Flaw

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service EMS 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointers...

CVE-2007-5656

TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service EMS 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted requests that control loop operations related to memory...

CVE-2007-5655

CVE-2007-5655 affects TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and EMS 4.0.0–4.4.1. The vulnerability allows remote attackers to execute arbitrary code by sending crafted requests that include values used as pointers, which are then treated in memory operations. The iD...

CVE-2007-5657

CVE-2007-5657 affects TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and EMS 4.0.0–4.4.1. The root cause is using values from requests as offsets to valid pointers during memory operations, enabling a remote attacker to execute arbitrary code or crash the service with SYSTEM...

CVE-2007-5656

CVE-2007-5656 affects TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and EMS 4.0.0–4.4.1. A remote attacker can send crafted requests that control the iteration counts of loops used during memory operations, potentially crashing RTserver and possibly allowing arbitrary code ...

CVE-2006-1671

Control cards for Cisco Optical Networking System ONS 15000 series nodes before 20060405 allow remote attackers to cause a denial of service card reset via 1 a "crafted" IP packet to a device with secure mode EMS-to-network-element access, aka bug ID CSCsc51390; 2 a "crafted" IP packet to a devic...