TIBCO Rendezvous daemon HTTP administrative interface buffer overflow
| tibco-rendezvous-admin-bo (26939) |  High Risk |
Description:
Multiple daemon components used by TIBCO Rendezvous, TIBCO Runtime Agent (TRA) and TIBCO Hawk are vulnerable to a buffer overflow in the HTTP administrative interface. By sending a specially-crafted HTTP request to the administrative interface, a remote attacker could overflow a buffer and execute arbitrary code on the system with elevated privileges or cause the affected daemon to crash.
The following daemon components are affected by this vulnerability: TIBCO Rendezvous Routing Daemon (rvrd) TIBCO Rendezvous Secure Routing Daemon (rvsrd) TIBCO Rendezvous Secure Daemon (rvsd) TIBCO Rendezvous Cache (rvcache) TIBCO Rendezvous Agent (rva)
Consequences:
Gain Access
Remedy:
Refer to TIBCO Software Inc. Security Advisory June 5, 2006 for upgrade or suggested workaround information. See References.
References:
- TIBCO Software Inc. Security Advisory June 5, 2006 : TIBCO Rendezvous vulnerability.
- TIBCO Software Inc. Web site: TIBCO Hawk.
- TIBCO Software Inc. Web site: TIBCO Rendezvous.
- BID-18301: TIBCO Rendezvous HTTP Interface Remote Buffer Overflow Vulnerability
- CVE-2006-2830: Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface.
- SA20452: TIBCO Rendezvous HTTP Administrative Interface Buffer Overflow
- SECTRACK ID: 1016145: TIBCO Rendezvous Buffer Overflow Lets Remote Users Execute Arbitrary Code
- US-CERT VU#999884: TIBCO Rendezvous daemon components contain a buffer overflow in the HTTP administrative interface
- VUPEN/ADV-2006-2155: TIBCO Rendezvous HTTP Administrative Interface Buffer Overflow Vulnerability
Platforms Affected:
- FreeBSD FreeBSD
- IBM OS 390
- IBM OS 400
- TIBCO Hawk prior to 4.6.1
- TIBCO Rendezvous prior to 7.5.1
- TIBCO Runtime Agent (TRA) prior to 5.4
Reported:
Jun 05, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net