CVE-2015-4555

Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Rendezvous Daemon (rvd), Routing Daemon (rvrd), Secure Daemon (rvsd), Secure Routing Daemon (rvsrd), Gateway Daemon (rvgd), Daemon Adapter (rvda), Cache (rvcache), Agent (rva), and Relay Agent (rvrad) components.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securitytracker.com/id/1033677	Third Party Advisory VDB Entry
http://www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt	Vendor Advisory
http://www.tibco.com/mk/advisory.jsp	Vendor Advisory
http://www.securitytracker.com/id/1033677	Third Party Advisory VDB Entry
http://www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt	Vendor Advisory
http://www.tibco.com/mk/advisory.jsp	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:tibco:messaging_appliance::::::::
	cpe:2.3:a:tibco:rendezvous::::::::
	cpe:2.3:a:tibco:rendezvous_network_server::::::::
	cpe:2.3:a:tibco:substation_es::::::::

History

21 Nov 2024, 02:31

Type	Values Removed	Values Added
References	~~() http://www.securitytracker.com/id/1033677 - Third Party Advisory, VDB Entry~~	() http://www.securitytracker.com/id/1033677 - Third Party Advisory, VDB Entry
References	~~() http://www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt - Vendor Advisory~~	() http://www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt - Vendor Advisory
References	~~() http://www.tibco.com/mk/advisory.jsp - Vendor Advisory~~	() http://www.tibco.com/mk/advisory.jsp - Vendor Advisory

Information

Published : 2015-08-30 14:59

Updated : 2024-11-21 02:31

NVD link : CVE-2015-4555

Mitre link : CVE-2015-4555

CVE.ORG link : CVE-2015-4555

JSON object : View

Products Affected

tibco

substation_es
rendezvous_network_server
messaging_appliance
rendezvous

CWE

NVD-CWE-noinfo

{"id": "CVE-2015-4555", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2015-08-30T14:59:02.047", "references": [{"url": "http://www.securitytracker.com/id/1033677", "tags": ["Third Party Advisory", "VDB Entry"], "source": "cve@mitre.org"}, {"url": "http://www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.tibco.com/mk/advisory.jsp", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1033677", "tags": ["Third Party Advisory", "VDB Entry"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.tibco.com/assets/blt18493dc775c50c09/2015-002-advisory.txt", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.tibco.com/mk/advisory.jsp", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in the HTTP administrative interface in TIBCO Rendezvous before 8.4.4, Rendezvous Network Server before 1.1.1, Substation ES before 2.9.0, and Messaging Appliance before 8.7.2 allows remote attackers to cause a denial of service or possibly execute arbitrary code via unspecified vectors, related to the Rendezvous Daemon (rvd), Routing Daemon (rvrd), Secure Daemon (rvsd), Secure Routing Daemon (rvsrd), Gateway Daemon (rvgd), Daemon Adapter (rvda), Cache (rvcache), Agent (rva), and Relay Agent (rvrad) components."}, {"lang": "es", "value": "Desbordamiento de buffer en la interfaz administrativa HTTP en TIBCO Rendezvous en versiones anteriores a 8.4.4, Rendezvous Network Server en versiones anteriores a 1.1.1, Substation ES en versiones anteriores a 2.9.0 y Messaging Appliance en versiones anteriores a 8.7.2, permite a atacantes remotos causar una denegaci\u00f3n de servicio o posiblemente ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores no especificados, relacionado con los componentes Rendezvous Daemon (rvd), Routing Daemon (rvrd), Secure Daemon (rvsd), Secure Routing Daemon (rvsrd), Gateway Daemon (rvgd), Daemon Adapter (rvda), Cache (rvcache), Agent (rva) y Relay Agent (rvrad)."}], "lastModified": "2024-11-21T02:31:20.107", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:tibco:messaging_appliance:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7CD8500F-39AF-488D-B280-2670C0E272F6", "versionEndIncluding": "8.7.1"}, {"criteria": "cpe:2.3:a:tibco:rendezvous:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0F2E5AF9-C1C2-480D-A2AF-28A685112DF8", "versionEndIncluding": "8.4.3"}, {"criteria": "cpe:2.3:a:tibco:rendezvous_network_server:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "29B5BC83-586E-49D7-98AB-68DAB4028E64", "versionEndIncluding": "1.1.0"}, {"criteria": "cpe:2.3:a:tibco:substation_es:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "86B28ADD-B5D3-481A-8FCB-CC4EDD626B67", "versionEndIncluding": "2.8.1"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}