high7.2
CVE-2011-0649
Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 t…
Impact
Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Service vebefore 1.0.2, and Silver BusinessWorks Service 1.0.0, when running on Unix systems, allow local users to gain root privileges via unknown vectors related to SUID and (1) Rendezvous Routing Daemon (rvrd), (2) Rendezvous Secure Daemon (rvsd), (3) Rendezvous Secure Routing Daemon (rvsrd), and (4) EMS Server (tibemsd).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tibco | Rendezvous | Versions 8.2.1, 8.3.0 |
| Tibco | Enterprise Message Service | Versions 5.1.0, 5.1.1, 6.0.0 |
| Tibco | Runtime Agent | Versions 5.6.2, 5.7.0 |
| Tibco | Silver Bpm Service | through 1.0.3 Version 1.0.1 |
| Tibco | Silver Cap Service | through 1.0.1 Version 1.0.0 |
| Tibco | Silver Businessworks Service | Version 1.0.0 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/43160
- http://secunia.com/advisories/43174
- http://www.securityfocus.com/bid/46104
- http://www.tibco.com/multimedia/rv_ems_security_advisory_20110201_tcm8-13185.txt
- http://www.vupen.com/english/advisories/2011/0269
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65105
- http://secunia.com/advisories/43160
- http://secunia.com/advisories/43174
- http://www.securityfocus.com/bid/46104
- http://www.tibco.com/multimedia/rv_ems_security_advisory_20110201_tcm8-13185.txt
- http://www.vupen.com/english/advisories/2011/0269
- https://exchange.xforce.ibmcloud.com/vulnerabilities/65105