Lucene search

MitreCVE-2006-2830

HistoryJun 05, 2006 - 8:06 p.m.

CVE-2006-2830

2006-06-0520:06:00

mitre

web.nvd.nist.gov

cve-2006-2830

buffer overflow

tibco rendezvous

tibco runtime agent

hawk

denial of service

remote code execution

http administrative interface

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.086

Percentile

94.5%

JSON

Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface.

Affected configurations

Nvd

Node

tibcohawkMatch4.6.1

tibcorendezvousMatch7.5.1

tibcoruntime_agentMatch5.3

VendorProductVersionCPE
tibcohawk4.6.1cpe:2.3:a:tibco:hawk:4.6.1:*:*:*:*:*:*:*
tibcorendezvous7.5.1cpe:2.3:a:tibco:rendezvous:7.5.1:*:*:*:*:*:*:*
tibcoruntime_agent5.3cpe:2.3:a:tibco:runtime_agent:5.3:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
tibco	hawk	4.6.1	cpe:2.3:a:tibco:hawk:4.6.1:::::::*
tibco	rendezvous	7.5.1	cpe:2.3:a:tibco:rendezvous:7.5.1:::::::*
tibco	runtime_agent	5.3	cpe:2.3:a:tibco:runtime_agent:5.3:::::::*

References

secunia.com/advisories/20452

securitytracker.com/id?1016145

www.kb.cert.org/vuls/id/999884

www.securityfocus.com/bid/18301

www.tibco.com/resources/mk/rendezvous_security_advisory.txt

www.vupen.com/english/advisories/2006/2155

exchange.xforce.ibmcloud.com/vulnerabilities/26939

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.8

Confidence

Low

EPSS

0.086

Percentile

94.5%

JSON

Related for CVE-2006-2830