CVE-2008-3338

Published Aug 13, 2008

Last updated 7 years ago

Overview

Description: Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 10
Impact score: 10
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:C/I:C/A:C

Weaknesses

nvd@nist.gov: CWE-119

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:tibco:hawk:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7FB4C18E-D1AD-4064-949A-D00A2A4B41BC",
            "versionEndIncluding": "4.8.0"
          },
          {
            "criteria": "cpe:2.3:a:tibco:hawk:4.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F540B195-58CD-4491-9D4F-9BCB87F696AC"
          },
          {
            "criteria": "cpe:2.3:a:tibco:hawk:4.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C85CA6D7-B286-4CC0-A05F-01EEFC653780"
          },
          {
            "criteria": "cpe:2.3:a:tibco:hawk:4.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "B985F703-24AC-4CD5-AF58-C03D071CA4F0"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F085498D-67C1-43D2-AAA2-35BA8AF1998E"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "7E90A12B-BEB4-4F51-B4D2-BA0DB127CE05"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "EBF898A2-46AA-4A79-8D85-2C34174AD44E"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5B9388D9-CC97-487B-864C-F8FA9BFF7306"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "389EDDD9-4EFC-4B11-A3B9-C3BCD8D4DBAE"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.3.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9CCBA1D2-6FDF-4D6F-9316-9B6F3A9BD50A"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F45470DC-9C5C-4CBE-8DFD-FE49008A0D14"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "50CFE4BA-00B8-4334-9B67-0A4276F5FCEE"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "900BB34F-1533-4D53-904D-78E3D6EF3ED5"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "94FDFA30-E50A-4AD1-81F6-39E58DCCC515"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.6.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "CF6D5769-8FE2-4923-94EE-92619D8D086A"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.6.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C65C714C-91B8-4665-B9BD-699BE318EDA2"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:10.6.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0832F843-1C4E-42D3-9FF0-935B93E221A5"
          },
          {
            "criteria": "cpe:2.3:a:tibco:iprocess_engine:11.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F054EC47-12B5-45B9-A526-B2EBEEB2378B"
          },
          {
            "criteria": "cpe:2.3:a:tibco:mainframe_service_tracker:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C09CA1D8-63C8-4104-9971-F02F524233D0",
            "versionEndIncluding": "1.0"
          },
          {
            "criteria": "cpe:2.3:a:tibco:runtime_agent:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F939E999-5F16-430E-B960-965C25576D10",
            "versionEndIncluding": "5.5.4"
          },
          {
            "criteria": "cpe:2.3:a:tibco:runtime_agent:5.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ACF12C0E-8768-4A03-B56B-D635076B01C8"
          },
          {
            "criteria": "cpe:2.3:a:tibco:runtime_agent:5.4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0A6C4A47-FBEF-4171-9C97-FFAD45ACB263"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References