Description
TIBCO SmartSockets RTserver 6.8.0 and earlier, RTworks before 4.0.4, and Enterprise Message Service (EMS) 4.0.0 through 4.4.1 allows remote attackers to execute arbitrary code via crafted requests containing values that are used as pointer offsets.
References
- http://www.tibco.com/resources/mk/ems_security_advisory_20080115.txt
- 28490 third-party-advisory
- 1019193 vdb-entry
- 20080115 TIBCO SmartSockets RTserver Multiple Untrusted Pointer Offset Vulnerabilities third-party-advisory
- tibco-rtserver-offset-code-execution(39707) vdb-entry
- http://www.tibco.com/resources/mk/sspfm_security_advisory_20080115.txt
- http://www.tibco.com/resources/mk/smartsockets_security_advisory_20080115.txt
- http://www.tibco.com/mk/advisory.jsp
- 27295 vdb-entry
- ADV-2008-0173 vdb-entry