Login Request a demo
Unscored severity · published Jun 5, 2006
CVE-2006-2830
Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly…
–
CVSS
6%
EPSS
No
On KEV
Description
Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cause a denial of service and possibly execute arbitrary code via the HTTP administrative interface.
Exploitation
Is it being used?
Exploit prediction (EPSS)6.0% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HA
Hawk · Tibco
4.6.1 · source: NVD
RE
Rendezvous · Tibco
7.5.1 · source: NVD
RA
Runtime Agent · Tibco
5.3 · source: NVD
Affected product
HA
Hawk
Tibco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2830
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2830
Patch
http://secunia.com/advisories/20452
securitytracker.com
http://securitytracker.com/id?1016145
Patch
http://www.kb.cert.org/vuls/id/999884
www.securityfocus.com
http://www.securityfocus.com/bid/18301
Patch
http://www.tibco.com/resources/mk/rendezvous_security_advisory.txt
www.vupen.com
http://www.vupen.com/english/advisories/2006/2155
More from Hawk
8.8
CVE-2023-26219
TIBCO Operational Intelligence Hawk RedTail Credential Exposure Vulnerability
6.5
CVE-2024-3182
Install-type password disclosure vulnerability in Universal Installer including the Silent Installer in TIBCO Hawk versions 6.2.0, 6.2.1, 6.2.2 and 6.2.3 allows user's Enterprise…
6.5
CVE-2022-41564
TIBCO Operational Intelligence Hawk Redtail Credential Exposure Vulnerability
–
CVE-2008-3338
Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0;…
–
CVE-2008-1703
Multiple buffer overflows in TIBCO Software Rendezvous before 8.1.0, as used in multiple TIBCO products, allow remote attackers to execute arbitrary code via a crafted message