CVE-2011-0649

Severity Score

7.2

*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

Multiple unspecified vulnerabilities in TIBCO Rendezvous 8.2.1 through 8.3.0, Enterprise Message Service (EMS) 5.1.0 through 6.0.0, Runtime Agent (TRA) 5.6.2 through 5.7.0, Silver BPM Service before 1.0.4, Silver CAP Service vebefore 1.0.2, and Silver BusinessWorks Service 1.0.0, when running on Unix systems, allow local users to gain root privileges via unknown vectors related to SUID and (1) Rendezvous Routing Daemon (rvrd), (2) Rendezvous Secure Daemon (rvsd), (3) Rendezvous Secure Routing Daemon (rvsrd), and (4) EMS Server (tibemsd).

Múltiples vulnerabilidades no especificadas en Rendezvous versiones 8.2.1 hasta 8.3.0, Enterprise Message Service (EMS) versiones 5.1.0 hasta 6.0.0, Runtime Agent (TRA) versiones 5.6.2 hasta 5.7.0, Silver BPM Service anterior a versión 1.0.4, Silver CAP Service anterior a versión 1.0.2 y Silver BusinessWorks Service versión 1.0.0, de TIBCO, cuando son ejecutados en sistemas Unix, permiten a los usuarios locales alcanzar privilegios root por medio de vectores desconocidos relacionados con el SUID y (1) Demonio de Enrutamiento de Rendezvous (rvrd), (2) Demonio de Seguridad de Rendezvous (rvsd), (3) Demonio de Enrutamiento de Seguridad de Rendezvous (rvsrd), y (4) Servidor EMS (tibemsd).

*Credits: N/A

CVSS Scores

NISTv2 7.2

Attack Vector

Local

Attack Complexity

Low

Authentication

None

Confidentiality

Complete

Integrity

Complete

Availability

Complete

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2011-01-25 CVE Reserved
2011-02-04 CVE Published
2023-03-08 EPSS Updated
2024-08-06 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CAPEC

References (6)

URL	Tag	Source
http://www.securityfocus.com/bid/46104	Vdb Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/65105	Vdb Entry

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC
http://secunia.com/advisories/43160	2017-08-17
http://secunia.com/advisories/43174	2017-08-17
http://www.tibco.com/multimedia/rv_ems_security_advisory_20110201_tcm8-13185.txt	2017-08-17
http://www.vupen.com/english/advisories/2011/0269	2017-08-17

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Tibco Search vendor "Tibco"		Rendezvous Search vendor "Tibco" for product "Rendezvous"				8.2.1 Search vendor "Tibco" for product "Rendezvous" and version "8.2.1"		-		Affected
Tibco Search vendor "Tibco"		Rendezvous Search vendor "Tibco" for product "Rendezvous"				8.3.0 Search vendor "Tibco" for product "Rendezvous" and version "8.3.0"		-		Affected
Tibco Search vendor "Tibco"		Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service"				5.1.0 Search vendor "Tibco" for product "Enterprise Message Service" and version "5.1.0"		-		Affected
Tibco Search vendor "Tibco"		Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service"				5.1.1 Search vendor "Tibco" for product "Enterprise Message Service" and version "5.1.1"		-		Affected
Tibco Search vendor "Tibco"		Enterprise Message Service Search vendor "Tibco" for product "Enterprise Message Service"				6.0.0 Search vendor "Tibco" for product "Enterprise Message Service" and version "6.0.0"		-		Affected
Tibco Search vendor "Tibco"		Runtime Agent Search vendor "Tibco" for product "Runtime Agent"				5.6.2 Search vendor "Tibco" for product "Runtime Agent" and version "5.6.2"		-		Affected
Tibco Search vendor "Tibco"		Runtime Agent Search vendor "Tibco" for product "Runtime Agent"				5.7.0 Search vendor "Tibco" for product "Runtime Agent" and version "5.7.0"		-		Affected
Tibco Search vendor "Tibco"		Silver Bpm Service Search vendor "Tibco" for product "Silver Bpm Service"				<= 1.0.3 Search vendor "Tibco" for product "Silver Bpm Service" and version " <= 1.0.3"		-		Affected
Tibco Search vendor "Tibco"		Silver Bpm Service Search vendor "Tibco" for product "Silver Bpm Service"				1.0.1 Search vendor "Tibco" for product "Silver Bpm Service" and version "1.0.1"		-		Affected
Tibco Search vendor "Tibco"		Silver Cap Service Search vendor "Tibco" for product "Silver Cap Service"				<= 1.0.1 Search vendor "Tibco" for product "Silver Cap Service" and version " <= 1.0.1"		-		Affected
Tibco Search vendor "Tibco"		Silver Cap Service Search vendor "Tibco" for product "Silver Cap Service"				1.0.0 Search vendor "Tibco" for product "Silver Cap Service" and version "1.0.0"		-		Affected
Tibco Search vendor "Tibco"		Silver Businessworks Service Search vendor "Tibco" for product "Silver Businessworks Service"				1.0.0 Search vendor "Tibco" for product "Silver Businessworks Service" and version "1.0.0"		-		Affected