CVE-2015-4555

Опубликовано: 30 авг. 2015

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Rendezvous Daemon (rvd), Routing Daemon (rvrd), Secure Daemon (rvsd), Secure Routing Daemon (rvsrd), Gateway Daemon (rvgd), Daemon Adapter (rvda), Cache (rvcache), Agent (rva), and Relay Agent (rvrad) components.

Ссылки

http://www.securitytracker.com/id/1033677
Third Party Advisory
VDB Entry
http://www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory
http://www.securitytracker.com/id/1033677
Third Party Advisory
VDB Entry
http://www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt
Vendor Advisory
http://www.tibco.com/mk/advisory.jsp
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:tibco:messaging_appliance:*:*:*:*:*:*:*:*

Версия до 8.7.1 (включая)

cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*

Версия до 8.4.3 (включая)

cpe:2.3:a:tibco:rendezvous_network_server:*:*:*:*:*:*:*:*

Версия до 1.1.0 (включая)

cpe:2.3:a:tibco:substation_es:*:*:*:*:*:*:*:*

Версия до 2.8.1 (включая)

EPSS

Процентиль: 77%

0.01076

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-hjvx-fv52-6rp8

github

больше 3 лет назад