CVE:CVE-2011-0649
CNNVD:CNNVD-201102-057
TIBCO Rendezvous是美国TIBCO软件公司的一款可帮助用户快速构建和部署大规模分布式应用的中间件产品。
TIBCO Rendezvous 8.2.1至8.3.0版本，Enterprise Message Service(EMS)5.1.0至6.0.0版本，Runtime Agent(TRA)5.6.2至5.7.0版本，Silver BPM Service 1.0.4之前版本，Silver CAP Service 1.0.2之前版本，以及Silver BusinessWorks Service 1.0.0版本中存在多个未明漏洞。本地用户可以借助和SUID有关的未知向量，以及(1)Rendezvous Routing Daemon(rvrd)，(2)Rendezvous Secure Daemon(rvsd)，以及(3)Rendezvous Secure Routing Daemon(rvsrd)，获得根权限。
solution:Upgrade tibco rendezvous to a higher version than 8.2.1,8.3.0,and avoid the version 8.2.1,8.3.0; Upgrade tibco enterprise_message_service to a higher version than 5.1.0,5.1.1,6.0.0,and avoid the version 5.1.0,5.1.1,6.0.0; Upgrade tibco runtime_agent to a higher version than 5.6.2,5.7.0,and avoid the version 5.6.2,5.7.0; Upgrade tibco silver_bpm_service to a higher version than 1.0.3,1.0.1,and avoid the version (,1.0.3],1.0.1; Upgrade tibco silver_cap_service to a higher version than 1.0.1,1.0.0,and avoid the version (,1.0.1],1.0.0; Upgrade tibco silver_businessworks_service to a higher version than 1.0.0,and avoid the version 1.0.0