TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted requests that control loop operations related to memory.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Enterprise_message_service | Tibco | 4.0.0 (including) | 4.0.0 (including) |
| Enterprise_message_service | Tibco | 4.1.0 (including) | 4.1.0 (including) |
| Enterprise_message_service | Tibco | 4.2.0 (including) | 4.2.0 (including) |
| Enterprise_message_service | Tibco | 4.3.0 (including) | 4.3.0 (including) |
| Enterprise_message_service | Tibco | 4.4.0 (including) | 4.4.0 (including) |
| Enterprise_message_service | Tibco | 4.4.1 (including) | 4.4.1 (including) |
| Rtworks | Tibco | * | 4.0.3 (including) |
| Smartsockets_rtserver | Tibco | * | 6.8.0 (including) |
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=641
- http://secunia.com/advisories/28490
- http://securitytracker.com/id?1019193
- http://www.securityfocus.com/bid/27293
- http://www.tibco.com/mk/advisory.jsp
- http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt
- http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt
- http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt
- http://www.vupen.com/english/advisories/2008/0173
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39708
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=641
- http://secunia.com/advisories/28490
- http://securitytracker.com/id?1019193
- http://www.securityfocus.com/bid/27293
- http://www.tibco.com/mk/advisory.jsp
- http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt
- http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt
- http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt
- http://www.vupen.com/english/advisories/2008/0173
- https://exchange.xforce.ibmcloud.com/vulnerabilities/39708