TIBCO ActiveMatrix Products Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	44254
Class:	Unknown
CVE:	CVE-2010-3491
Remote:	Yes
Local:	No
Published:	Oct 20 2010 12:00AM
Updated:	Oct 20 2010 12:00AM
Credit:	Reported by the vendor
Vulnerable:	TIBCO ActiveMatrix Service Bus 0 TIBCO ActiveMatrix BusinessWorks Service Engine 0
Not Vulnerable:	TIBCO Service Performance Manager 1.3.2 TIBCO ActiveMatrix Service Grid 2.3.1 TIBCO ActiveMatrix Service Bus 2.3.1

TIBCO ActiveMatrix Products Unspecified Remote Code Execution Vulnerability

TIBCO ActiveMatrix products are prone to a remote code-execution vulnerability.

A remote attacker can leverage this issue to execute arbitrary code within the context of the application. Successful exploits will compromise the application and possibly the underlying computer.

The following products are affected:

TIBCO ActiveMatrix Service Grid versions prior to 2.3.1
TIBCO ActiveMatrix Service Bus versions prior to 2.3.1
TIBCO ActiveMatrix BusinessWorks Service Engine versions prior to 5.8.1
TIBCO ActiveMatrix Service Performance Manager versions prior to 1.3.2

TIBCO ActiveMatrix Products Unspecified Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TIBCO ActiveMatrix Products Unspecified Remote Code Execution Vulnerability

Solution:
Updates are available; please see the references for more information.

TIBCO ActiveMatrix Products Unspecified Remote Code Execution Vulnerability

References:

• TIBCO ActiveMatrix vulnerability (TIBCO)
  
• TIBCO Homepage (TIBCO)