Borland StarTeam Multiple Remote Vulnerabilities
BID:28080
Info
Borland StarTeam Multiple Remote Vulnerabilities
| Bugtraq ID: | 28080 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 03 2008 12:00AM |
| Updated: | Mar 03 2008 09:02PM |
| Credit: | Luigi Auriemma is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Borland StarTeam MPX 6.7 Borland StarTeam 2008 10.0 .57 |
| Not Vulnerable: | |
Discussion
Tibco SmartSockets Multiple Remote Vulnerabilities
Tibco SmartSockets is prone to multiple issues, including multiple integer-overflow vulnerabilities, a heap-overflow vulnerability, and a denial-of-service vulnerability.
Successfully exploiting these issues allows remote attackers to execute arbitrary machine code in the context of vulnerable server processes. These issues may facilitate the remote compromise of affected computers. Attackers may also trigger denial-of-service conditions.
Note: This issue was previously titled 'Borland StarTeam Multiple Remote Vulnerabilities'. The title and technical details have been changed to better reflect the underlying component affected.
Tibco SmartSockets 6.7 is vulnerable; other versions may also be affected.
Tibco SmartSockets is prone to multiple issues, including multiple integer-overflow vulnerabilities, a heap-overflow vulnerability, and a denial-of-service vulnerability.
Successfully exploiting these issues allows remote attackers to execute arbitrary machine code in the context of vulnerable server processes. These issues may facilitate the remote compromise of affected computers. Attackers may also trigger denial-of-service conditions.
Note: This issue was previously titled 'Borland StarTeam Multiple Remote Vulnerabilities'. The title and technical details have been changed to better reflect the underlying component affected.
Tibco SmartSockets 6.7 is vulnerable; other versions may also be affected.
Exploit / POC
Tibco SmartSockets Multiple Remote Vulnerabilities
The following exploit code is available:
The following exploit code is available:
Solution / Fix
Borland StarTeam Multiple Remote Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Borland StarTeam Multiple Remote Vulnerabilities
References:
References:
- Borland StarTeam Product Page (Borland)
- Multiple integer overflows in Borland StarTeam server 10.0.0.57 (Luigi Auriemma
- starteammpx-adv.txt (Luigi Auriemma)
- starteamz-adv.txt (Luigi Auriemma)