Description
rvd in TIBCO Rendezvous (RV) 7.5.2, when -no-lead-wc is omitted, might allow remote attackers to cause a denial of service (network instability) via a subject name with a leading (1) '*' (asterisk) or (2) '>' (greater than) wildcard character.
References
- 1018512 vdb-entry
- 37681 vdb-entry
- 20070730 Security Testing Enterprise Messaging Systems mailing-list
- http://www.irmplc.com/content/pdfs/Security_Testing_Enterprise_Messaging_Systems.pdf
- 26337 third-party-advisory
- ADV-2007-2814 vdb-entry