CVE:CVE-2008-1703
CNNVD:CNNVD-200804-143
TIBCO企业消息服务(EMS)是基于标准的消息传送平台，Rendezvous是一套帮助用户快速构建和部署大规模分布式应用的中间件 。
TIBCO EMS服务器(tibemsd)在处理某些入站消息时存在缓冲区溢出漏洞，可能导致执行任意指令、拒绝服务或泄露敏感信息 。
Rendezvous的以下组件在处理入站消息时也存在缓冲区溢出漏洞，可能导致执行任意指令、拒绝服务或泄露敏感信息 。
* TIBCO Rendezvous Daemon (rvd)
* TIBCO Rendezvous Routing Daemon (rvrd) 
* TIBCO Rendezvous Secure Routing Daemon (rvsrd) 
* TIBCO Rendezvous Secure Daemon (rvsd) 
* TIBCO Rendezvous Cache (rvcache) 
* TIBCO Rendezvous Agent (rva) 
* TIBCO Rendezvous Relay Agent (rvrad)
* TIBCO Rendezvous Performance Test Tool (rvperfm, rvperfs) 
* TIBCO Rendezvous client library (libtibrv) 
* TIBCO Rendezvous Server In-Process Module Add-on (libtibrvipm) 
* TIBCO Rendezvous Access Control List Daemon (rvacld) 
* TIBCO Rendezvous TX daemon (rvtxd) 
* TIBCO iProcess Engine Process Sentinal (procmgr, pmsulib) 
* TIBCO Substation ES RV Transformer (tibssxfr) 
* TIBCO File Adapter (z/OS) Publisher (sxf3rpub) 
* TIBCO File Adapter (z/OS) Subscriber (sxf3rsub)
solution:Upgrade tibco adapter_files_z_os to a higher version than 4.4.1,and avoid the version (,4.4.1]; Upgrade tibco hawk to a higher version than 4.8.0,and avoid the version (,4.8.0]; Upgrade tibco iprocess_engine to a higher version than 10.3.0,10.3.1,10.3.2,10.3.3,10.3.4,10.3.5,10.4,10.4.1,10.5,10.6,10.6.0,10.6.1,and avoid the version 10.3.0,10.3.1,10.3.2,10.3.3,10.3.4,10.3.5,10.4,10.4.1,10.5,10.6,10.6.0,10.6.1; Upgrade tibco rendezvous to a higher version than 8.10,and avoid the version (,8.10]; Upgrade tibco rendezvous_datasecurity to a higher version than 2.1.6,and avoid the version (,2.1.6]; Upgrade tibco rendezvous_tx to a higher version than 2.04,and avoid the version (,2.04]; Upgrade tibco runtime_agent to a higher version than 5.5.4,and avoid the version (,5.5.4]; Upgrade tibco substantiation_es to a higher version than 2.4.0,and avoid the version (,2.4.0]