CVE-2011-0649 Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before 1...
HighCVSS 7.2
EPSS 0.38%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Service vebefore 1.0.2, and Silver BusinessWorks Service 1.0.0, when running on Unix systems, allow local users to gain root privileges via unknown vectors related to SUID and (1) Rendezvous Routing Daemon (rvrd), (2) Rendezvous Secure Daemon (rvsd), (3) Rendezvous Secure Routing Daemon (rvsrd), and (4) EMS Server (tibemsd).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibco rendezvous | = 8.2.1 | No fix listed |
| tibco rendezvous | = 8.3.0 | No fix listed |
| tibco enterprise message service | = 5.1.0 | No fix listed |
| tibco enterprise message service | = 5.1.1 | No fix listed |
| tibco enterprise message service | = 6.0.0 | No fix listed |
| tibco runtime agent | = 5.6.2 | No fix listed |
| tibco runtime agent | = 5.7.0 | No fix listed |
| tibco silver bpm service | <= 1.0.3 | No fix listed |
| tibco silver bpm service | = 1.0.1 | No fix listed |
| tibco silver cap service | <= 1.0.1 | No fix listed |
| tibco silver cap service | = 1.0.0 | No fix listed |
| tibco silver businessworks service | = 1.0.0 | No fix listed |
References
- 43160 third-party-advisory vendor-advisory
- 43174 third-party-advisory vendor-advisory
- 46104 vdb-entry
- www.tibco.com vendor-advisory
- ADV-2011-0269 vdb-entry vendor-advisory
- tibco-suid-privilege-escalation(65105) vdb-entry