CVE-2008-3338: Buffer Overflow

Q: What is the severity of CVE-2008-3338?

CVE-2008-3338 has a high severity level due to the presence of multiple buffer overflow vulnerabilities that can be exploited remotely.

Q: How do I fix CVE-2008-3338?

To fix CVE-2008-3338, update your TIBCO Hawk, TIBCO iProcess Engine, or TIBCO Runtime Agent to the latest version as specified by TIBCO's security advisories.

Q: What software is affected by CVE-2008-3338?

CVE-2008-3338 affects multiple versions of TIBCO Hawk, TIBCO iProcess Engine, TIBCO Runtime Agent, and TIBCO Mainframe Service Tracker.

Q: Can CVE-2008-3338 be exploited remotely?

Yes, CVE-2008-3338 can be exploited remotely due to the buffer overflow vulnerabilities present in the affected software.

Q: Is there a public advisory for CVE-2008-3338?

Yes, there are public advisories and documentation detailing mitigation steps for CVE-2008-3338, published by TIBCO.

Published Aug 13, 2008

Updated

Multiple buffer overflows in TIBCO Hawk (1) AMI C library (libtibhawkami) and (2) Hawk HMA (tibhawkhma), as used in TIBCO Hawk before 4.8.1; Runtime Agent (TRA) before 5.6.0; iProcess Engine 10.3.0 through 10.6.2 and 11.0.0; and Mainframe Service Tracker before 1.1.0 might allow remote attackers to execute arbitrary code via a crafted message.

Affected Software

22 affected components

TIBCO iProcess Engine=10.6.0

TIBCO iProcess Engine=10.5

TIBCO iProcess Engine=10.6

TIBCO iProcess Engine=10.6.2

TIBCO Hawk<=4.8.0

TIBCO iProcess Engine=10.3.1

TIBCO Runtime Agent=5.4.0

TIBCO Hawk=4.6.0

TIBCO iProcess Engine=11.0

TIBCO Runtime Agent=5.3

TIBCO iProcess Engine=10.3.0

TIBCO iProcess Engine=10.4.1

TIBCO iProcess Engine=10.4

TIBCO Hawk=4.6.1

TIBCO iProcess Engine=10.3.5

TIBCO iProcess Engine=10.3.3

TIBCO Hawk=4.7

TIBCO iProcess Engine=10.3.2

TIBCO Runtime Agent<=5.5.4

TIBCO Mainframe Service Tracker<=1.0

TIBCO iProcess Engine=10.6.1

TIBCO iProcess Engine=10.3.4

Event History

Aug 13, 2008

CVE Published

via MITRE·10:00 PM

Data Sourced

via MITRE·10:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3338?

CVE-2008-3338 has a high severity level due to the presence of multiple buffer overflow vulnerabilities that can be exploited remotely.

How do I fix CVE-2008-3338?

To fix CVE-2008-3338, update your TIBCO Hawk, TIBCO iProcess Engine, or TIBCO Runtime Agent to the latest version as specified by TIBCO's security advisories.

What software is affected by CVE-2008-3338?

CVE-2008-3338 affects multiple versions of TIBCO Hawk, TIBCO iProcess Engine, TIBCO Runtime Agent, and TIBCO Mainframe Service Tracker.

Can CVE-2008-3338 be exploited remotely?

Yes, CVE-2008-3338 can be exploited remotely due to the buffer overflow vulnerabilities present in the affected software.

Is there a public advisory for CVE-2008-3338?