Login Request a demo
Unscored severity · published Jun 5, 2006
CVE-2006-2829
Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 allows authenticated users to execute arbitrary code via the…
–
CVSS
0.5%
EPSS
No
On KEV
Description
Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 allows authenticated users to execute arbitrary code via the configuration for tibhawkhma.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 41% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HA
Hawk · Tibco
4.6.0 · source: NVD
HM
Hawk Monitoring Agent · Tibco
All versions, or not specified · source: NVD
RA
Runtime Agent · Tibco
5.3 · source: NVD
Affected product
HA
Hawk
Tibco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2829
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2829
Vendor Advisory
http://secunia.com/advisories/20431
securitytracker.com
http://securitytracker.com/id?1016223
Patch
http://www.kb.cert.org/vuls/id/620516
www.securityfocus.com
http://www.securityfocus.com/bid/18300
Patch
http://www.tibco.com/resources/mk/hawk_security_advisory.txt
www.vupen.com
http://www.vupen.com/english/advisories/2006/2156
More from Hawk
8.8
CVE-2023-26219
TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability
6.5
CVE-2024-3182
Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise…
6.5
CVE-2022-41564
TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability
–
CVE-2008-3338
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0;…
–
CVE-2008-1703
Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message