CVE-2011-0649

Опубликовано: 04 фев. 2011

Источник: nvd

CVSS2: 7.2

EPSS Низкий

Описание

Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Service vebefore 1.0.2, and Silver BusinessWorks Service 1.0.0, when running on Unix systems, allow local users to gain root privileges via unknown vectors related to SUID and (1) Rendezvous Routing Daemon (rvrd), (2) Rendezvous Secure Daemon (rvsd), (3) Rendezvous Secure Routing Daemon (rvsrd), and (4) EMS Server (tibemsd).

Комментарий

Per: http://www.tibco.com/multimedia/rv_ems_security_advisory_20110201_tcm8-13185.txt

'TIBCO Rendezvous and EMS components listed above contain a SUID vulnerability which could potentially grant unauthorized root access to an attacker on Unix-based systems.'

Ссылки

http://secunia.com/advisories/43160
Vendor Advisory
http://secunia.com/advisories/43174
Vendor Advisory
http://www.securityfocus.com/bid/46104
http://www.tibco.com/multimedia/rv_ems_security_advisory_20110201_tcm8-13185.txt
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0269
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65105
http://secunia.com/advisories/43160
Vendor Advisory
http://secunia.com/advisories/43174
Vendor Advisory
http://www.securityfocus.com/bid/46104
http://www.tibco.com/multimedia/rv_ems_security_advisory_20110201_tcm8-13185.txt
Vendor Advisory
http://www.vupen.com/english/advisories/2011/0269
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/65105

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:rendezvous:8.2.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:rendezvous:8.3.0:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:tibco:enterprise_message_service:5.1.0:*:*:*:*:*:*:*

cpe:2.3:a:tibco:enterprise_message_service:5.1.1:*:*:*:*:*:*:*

cpe:2.3:a:tibco:enterprise_message_service:6.0.0:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:tibco:runtime_agent:5.6.2:*:*:*:*:*:*:*

cpe:2.3:a:tibco:runtime_agent:5.7.0:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:tibco:silver_bpm_service:*:*:*:*:*:*:*:*

Версия до 1.0.3 (включая)

cpe:2.3:a:tibco:silver_bpm_service:1.0.1:*:*:*:*:*:*:*

Конфигурация 5

Одно из

cpe:2.3:a:tibco:silver_cap_service:*:*:*:*:*:*:*:*

Версия до 1.0.1 (включая)

cpe:2.3:a:tibco:silver_cap_service:1.0.0:*:*:*:*:*:*:*

Конфигурация 6

cpe:2.3:a:tibco:silver_businessworks_service:1.0.0:*:*:*:*:*:*:*

EPSS

Процентиль: 30%

0.00107

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-hwqv-g52g-rgvm

github

больше 3 лет назад

EPSS

Процентиль: 30%

0.00107

Низкий

7.2 High

CVSS2

Дефекты

NVD-CWE-noinfo