CVE-2008-1703

Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message.

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/29774	Vendor Advisory
http://www.osvdb.org/44269
http://www.securityfocus.com/bid/28717
http://www.securitytracker.com/id?1019826
http://www.tibco.com/resources/mk/rendezvous_security_advisory_20080409.txt
http://www.vupen.com/english/advisories/2008/1189/references
http://www.vupen.com/english/advisories/2008/1190/references
https://exchange.xforce.ibmcloud.com/vulnerabilities/41760

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:tibco:adapter_files_z_os::::::::
	cpe:2.3:a:tibco:hawk::::::::
	cpe:2.3:a:tibco:iprocess_engine:10.3.0:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.3.1:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.3.2:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.3.3:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.3.4:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.3.5:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.4:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.4.1:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.5:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.6:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.6.0:::::::*
	cpe:2.3:a:tibco:iprocess_engine:10.6.1:::::::*
	cpe:2.3:a:tibco:rendezvous::::::::
	cpe:2.3:a:tibco:rendezvous_datasecurity::::::::
	cpe:2.3:a:tibco:rendezvous_tx::::::::
	cpe:2.3:a:tibco:runtime_agent::::::::
	cpe:2.3:a:tibco:substantiation_es::::::::

History

No history.

Information

Published : 2008-04-11 10:05

Updated : 2017-08-08 01:30

NVD link : CVE-2008-1703

Mitre link : CVE-2008-1703

CVE.ORG link : CVE-2008-1703

JSON object : View

Products Affected

tibco

hawk
iprocess_engine
rendezvous_datasecurity
rendezvous_tx
substantiation_es
adapter_files_z_os
rendezvous
runtime_agent

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2008-1703", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-04-11T10:05:00.000", "references": [{"url": "http://secunia.com/advisories/29774", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/44269", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/28717", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id?1019826", "source": "cve@mitre.org"}, {"url": "http://www.tibco.com/resources/mk/rendezvous_security_advisory_20080409.txt", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/1189/references", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/1190/references", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/41760", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message."}, {"lang": "es", "value": "M\u00faltiples desbordamientos de b\u00fafer en TIBCO Software Rendezvous anterior a 8.1.0., utilizado en m\u00faltiples productos TIBCO,permitena atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n mediante un mensaje manipulado."}], "lastModified": "2017-08-08T01:30:22.887", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tibco:adapter_files_z_os:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "46E74B55-ED15-4EA1-8AAC-8BB98798A1DC", "versionEndIncluding": "4.4.1"}, {"criteria": "cpe:2.3:a:tibco:hawk:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7FB4C18E-D1AD-4064-949A-D00A2A4B41BC", "versionEndIncluding": "4.8.0"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F085498D-67C1-43D2-AAA2-35BA8AF1998E"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7E90A12B-BEB4-4F51-B4D2-BA0DB127CE05"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EBF898A2-46AA-4A79-8D85-2C34174AD44E"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5B9388D9-CC97-487B-864C-F8FA9BFF7306"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "389EDDD9-4EFC-4B11-A3B9-C3BCD8D4DBAE"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9CCBA1D2-6FDF-4D6F-9316-9B6F3A9BD50A"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F45470DC-9C5C-4CBE-8DFD-FE49008A0D14"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "50CFE4BA-00B8-4334-9B67-0A4276F5FCEE"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "900BB34F-1533-4D53-904D-78E3D6EF3ED5"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94FDFA30-E50A-4AD1-81F6-39E58DCCC515"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CF6D5769-8FE2-4923-94EE-92619D8D086A"}, {"criteria": "cpe:2.3:a:tibco:iprocess_engine:10.6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C65C714C-91B8-4665-B9BD-699BE318EDA2"}, {"criteria": "cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "17CFBB43-82E9-4E7F-938C-B11B6425D3DC", "versionEndIncluding": "8.10"}, {"criteria": "cpe:2.3:a:tibco:rendezvous_datasecurity:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "413BBA07-5D7E-4E2F-9D1D-E26E2511FE74", "versionEndIncluding": "2.1.6"}, {"criteria": "cpe:2.3:a:tibco:rendezvous_tx:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0D0E28E2-852E-4872-BED1-C17BE83DC75B", "versionEndIncluding": "2.04"}, {"criteria": "cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F939E999-5F16-430E-B960-965C25576D10", "versionEndIncluding": "5.5.4"}, {"criteria": "cpe:2.3:a:tibco:substantiation_es:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EA8B1410-F4D3-475E-AF5B-BFBDBD0982DF", "versionEndIncluding": "2.4.0"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

9.3 /10