Multiple TIBCO Products Unspecified Local Privilege Escalation Vulnerability
BID:46104
Info
Multiple TIBCO Products Unspecified Local Privilege Escalation Vulnerability
| Bugtraq ID: | 46104 |
| Class: | Unknown |
| CVE: |
CVE-2011-0649 |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 02 2011 12:00AM |
| Updated: | Mar 19 2015 08:18AM |
| Credit: | TIBCO |
| Vulnerable: |
TIBCO Silver CAP Service 1.0.1 TIBCO Silver BusinessWorks Service 1.0 TIBCO Silver BPM Service 1.0.3 TIBCO Runtime Agent 5.7 TIBCO Runtime Agent 5.6.9 TIBCO Runtime Agent 5.6.8 TIBCO Runtime Agent 5.6.7 TIBCO Runtime Agent 5.6.6 TIBCO Runtime Agent 5.6.5 TIBCO Runtime Agent 5.6.4 TIBCO Runtime Agent 5.6.3 TIBCO Runtime Agent 5.6.2 TIBCO Rendezvous 8.3 TIBCO Rendezvous 8.2.9 TIBCO Rendezvous 8.2.8 TIBCO Rendezvous 8.2.7 TIBCO Rendezvous 8.2.6 TIBCO Rendezvous 8.2.5 TIBCO Rendezvous 8.2.4 TIBCO Rendezvous 8.2.3 TIBCO Rendezvous 8.2.2 TIBCO Rendezvous 8.2.1 TIBCO Enterprise Message Service 6.0 TIBCO Enterprise Message Service 5.9 TIBCO Enterprise Message Service 5.8 TIBCO Enterprise Message Service 5.7 TIBCO Enterprise Message Service 5.6 TIBCO Enterprise Message Service 5.5 TIBCO Enterprise Message Service 5.4 TIBCO Enterprise Message Service 5.3 TIBCO Enterprise Message Service 5.2 TIBCO Enterprise Message Service 5.1 TIBCO CAP 1.0.2 |
| Not Vulnerable: |
TIBCO Silver CAP 1.0.2 TIBCO Silver BusinessWorks Service 1.0.1 TIBCO Silver BPM 1.0.4 TIBCO Runtime Agent 5.7.1 TIBCO Rendezvous 8.3.1 TIBCO Enterprise Message Service 6.0.1 |
Discussion
Multiple TIBCO Products Unspecified Local Privilege Escalation Vulnerability
Multiple TIBCO products are prone to an unspecified local privilege-escalation vulnerability.
Very few details are currently available. We will update this BID when more information emerges.
Attackers can exploit this issue to gain elevated privileges on the affected computer or to create a denial-of-service condition.
The following products are affected:
TIBCO Rendezvous versions 8.2.1 to 8.3.0
TIBCO Enterprise Message Service (EMS) versions 5.1.0 to 6.0.0
TIBCO Runtime Agent (TRA) versions 5.6.2 to 5.7.0
TIBCO Silver BPM Service versions prior to 1.0.4
TIBCO Silver CAP Service versions prior to 1.0.2
TIBCO Silver BusinessWorks Service version 1.0.0
Multiple TIBCO products are prone to an unspecified local privilege-escalation vulnerability.
Very few details are currently available. We will update this BID when more information emerges.
Attackers can exploit this issue to gain elevated privileges on the affected computer or to create a denial-of-service condition.
The following products are affected:
TIBCO Rendezvous versions 8.2.1 to 8.3.0
TIBCO Enterprise Message Service (EMS) versions 5.1.0 to 6.0.0
TIBCO Runtime Agent (TRA) versions 5.6.2 to 5.7.0
TIBCO Silver BPM Service versions prior to 1.0.4
TIBCO Silver CAP Service versions prior to 1.0.2
TIBCO Silver BusinessWorks Service version 1.0.0
Exploit / POC
Multiple TIBCO Products Unspecified Local Privilege Escalation Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple TIBCO Products Unspecified Local Privilege Escalation Vulnerability
Solution:
Updates are available; please see the references for more information.
Solution:
Updates are available; please see the references for more information.
References
Multiple TIBCO Products Unspecified Local Privilege Escalation Vulnerability
References:
References: