FKIE_CVE-2009-1291

Vulnerability from fkie_nvd - Published: 2009-04-30 20:30 - Updated: 2025-04-09 00:30
Severity ?
Summary
Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterprise Message Service (EMS) 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server (aka RTserver), SmartSockets client libraries and add-on products, RTworks libraries and components, EMS Server (aka tibemsd), SmartMQ, iProcess Engine, ActiveMatrix products, and CA Enterprise Communicator, allows remote attackers to execute arbitrary code via "inbound data," as demonstrated by requests to the UDP interface of the RTserver component, and data injection into the TCP stream to tibemsd.
References
cve@mitre.orghttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785
cve@mitre.orghttp://secunia.com/advisories/34911Vendor Advisory
cve@mitre.orghttp://securitytracker.com/id?1022129
cve@mitre.orghttp://www.harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html
cve@mitre.orghttp://www.securityfocus.com/bid/34754
cve@mitre.orghttp://www.tibco.com/multimedia/security_advisory_ems_tcm8-7558.txtVendor Advisory
cve@mitre.orghttp://www.tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txtVendor Advisory
cve@mitre.orghttp://www.tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txtVendor Advisory
cve@mitre.orghttp://www.tibco.com/services/support/advisories/default.jspPatch, Vendor Advisory
cve@mitre.orghttp://www.tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jspVendor Advisory
cve@mitre.orghttp://www.vupen.com/english/advisories/2009/1198Vendor Advisory
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/50214
af854a3a-2127-422b-91ae-364da2661108http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/34911Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1022129
af854a3a-2127-422b-91ae-364da2661108http://www.harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/34754
af854a3a-2127-422b-91ae-364da2661108http://www.tibco.com/multimedia/security_advisory_ems_tcm8-7558.txtVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txtVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txtVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.tibco.com/services/support/advisories/default.jspPatch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jspVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2009/1198Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/50214
Impacted products
Vendor Product Version
tibco enterprise_message_service *
tibco enterprise_message_service 4.0.0
tibco enterprise_message_service 4.1.0
tibco enterprise_message_service 4.2.0
tibco enterprise_message_service 4.3.0
tibco enterprise_message_service 4.4.1
tibco enterprise_message_service 4.4.2
tibco rtworks 4.0.3
tibco rtworks 4.0.4
tibco smartsockets 6.8.0
tibco smartsockets 6.8.1
tibco smartsockets_rtserver *
tibco smartsockets_rtserver 6.8.0
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:tibco:enterprise_message_service:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "6217FE17-B839-43F5-BE35-F4A01C40DA22",
              "versionEndIncluding": "5.1.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:enterprise_message_service:4.0.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "8A391F64-B618-4961-942C-109CE548FBB9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:enterprise_message_service:4.1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3811EEE8-ED90-4272-BDC9-9FBB7E2ABC50",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:enterprise_message_service:4.2.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "72D4BFCE-FD9B-45D8-B23A-B928B86ED2B8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:enterprise_message_service:4.3.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "A8B14826-B53E-46DC-8AE9-85776867D341",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:enterprise_message_service:4.4.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "50598050-FAC6-42B6-98E5-D02DF85F1A07",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:enterprise_message_service:4.4.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "D47D8470-3A41-4A12-95B4-B77A97A2AF65",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:rtworks:4.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "5E49B105-E110-4A0B-A93B-B93A956B9A06",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:rtworks:4.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "087EFE3D-85C1-4479-B867-AD32A20693A9",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:smartsockets:6.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "F1ABE58C-9AF7-4013-A117-D72FF5991F49",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:smartsockets:6.8.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "A0823AC2-9E58-4669-9DC0-41A5A93B427B",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:smartsockets_rtserver:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "E3B33DD3-A164-4C13-A961-1E66ACB87DDE",
              "versionEndIncluding": "6.8.1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:tibco:smartsockets_rtserver:6.8.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "73DC7F67-3813-4659-9429-78B93C02385B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in TIBCO SmartSockets before 6.8.2, SmartSockets Product Family (aka RTworks) before 4.0.5, and Enterprise Message Service (EMS) 4.0.0 through 5.1.1, as used in SmartSockets Server and RTworks Server (aka RTserver), SmartSockets client libraries and add-on products, RTworks libraries and components, EMS Server (aka tibemsd), SmartMQ, iProcess Engine, ActiveMatrix products, and CA Enterprise Communicator, allows remote attackers to execute arbitrary code via \"inbound data,\" as demonstrated by requests to the UDP interface of the RTserver component, and data injection into the TCP stream to tibemsd."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer basado en pila en  TIBCO SmartSockets antes de v6.8.2, SmartSockets Product Family (alias RTworks) antes de v4.0.5, y Enterprise Message Service (EMS) v4.0.0 hasta v5.1.1, utilizado en SmartSockets Server y RTworks Server (alias RTserver), librerias del cliente SmartSockets y productos con el complemento, \r\nlibrerias y componentes RTworks, EMS Server (alias tibemsd), SmartMQ, iProcess Engine, productos ActiveMatrix, y CA Enterprise Communicator, permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de \"inbound data,\" (datos de entrada), como lo demuestran las solicitudes de la interfaz UDP de el componente RTserver, y inyecci\u00f3n de datos en el flujo TCP a tibemsd."
    }
  ],
  "id": "CVE-2009-1291",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 10.0,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 10.0,
        "obtainAllPrivilege": true,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-04-30T20:30:00.377",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34911"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://securitytracker.com/id?1022129"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/34754"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/multimedia/security_advisory_ems_tcm8-7558.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/services/support/advisories/default.jsp"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jsp"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/1198"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50214"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=785"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/34911"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://securitytracker.com/id?1022129"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.harmonysecurity.com/blog/2009/04/tibco-smartsockets-stack-buffer.html"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/34754"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/multimedia/security_advisory_ems_tcm8-7558.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/multimedia/security_advisory_rtworks_tcm8-7559.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/multimedia/security_advisory_smartsockets_tcm8-7560.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/services/support/advisories/default.jsp"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.tibco.com/services/support/advisories/smartsockets-sspfm-ems_advisory_20090428.jsp"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://www.vupen.com/english/advisories/2009/1198"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/50214"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.