TIBCO ActiveMatrix Products Unspecified Remote Code Execution Vulnerability

Bugtraq ID:	45400
Class:	Unknown
CVE:	CVE-2010-4495
Remote:	Yes
Local:	No
Published:	Dec 14 2010 12:00AM
Updated:	Dec 14 2010 12:00AM
Credit:	Reported by the vendor
Vulnerable:	TIBCO XML Canon 3.1 TIBCO Silver CAP Service 1.0 TIBCO Silver BPM Service 1.0.1 TIBCO ActiveMatrix Service Grid 3.1 TIBCO ActiveMatrix Service Grid 3.0.1 TIBCO ActiveMatrix Service Grid 3.0 TIBCO ActiveMatrix Service Bus 3.0.1 TIBCO ActiveMatrix Service Bus 3.0 TIBCO ActiveMatrix BusinessWorks Service Engine 5.9 TIBCO ActiveMatrix BPM 1.0.2
Not Vulnerable:	TIBCO Silver CAP Service 1.0.1 TIBCO Silver BPM Service 1.0.3 TIBCO ActiveMatrix Service Grid 3.1.1 TIBCO ActiveMatrix Service Grid 3.0.2 TIBCO ActiveMatrix Service Bus 3.0.2 TIBCO ActiveMatrix BusinessWorks Service Engine 5.9.1 TIBCO ActiveMatrix BPM 1.0.3

TIBCO ActiveMatrix Products Unspecified Remote Code Execution Vulnerability

TIBCO ActiveMatrix products are prone to a remote code-execution vulnerability.

A remote attacker can leverage this issue to execute arbitrary code within the context of the application. Successful exploits will compromise the application and possibly the underlying computer.

The following products are affected:

TIBCO ActiveMatrix Service Grid versions 3.0.0, 3.0.1, and 3.1.0
TIBCO ActiveMatrix Service Bus versions 3.0.0 and 3.0.1
TIBCO ActiveMatrix BusinessWorks Service Engine 5.9.0
TIBCO ActiveMatrix BPM versions 1.0.1 and 1.0.2
TIBCO Silver BPM Service version 1.0.1
TIBCO Silver CAP Service version 1.0.0

TIBCO ActiveMatrix Products Unspecified Remote Code Execution Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

TIBCO ActiveMatrix Products Unspecified Remote Code Execution Vulnerability

References:

• TIBCO ActiveMatrix vulnerability (TIBCO)
  
• TIBCO Homepage (TIBCO)
  
• TIBCO Advisory (TIBCO)