CVE-2010-0184

The (1) domainutility and (2) domainutilitycmd components in TIBCO Domain Utility in TIBCO Runtime Agent (TRA) before 5.6.2, as used in TIBCO ActiveMatrix BusinessWorks and other products, set weak permissions on domain properties files, which allows local users to obtain domain administrator credentials, and gain privileges on all domain systems, via unspecified vectors.
Severity
UNKNOWN
AV:L/AC:L/Au:N/C:C/I:C/A:C
Atk. Vector
LOCAL
Atk. Complexity
LOW
Base Score
CVSS 3.x
EPSS Score
Percentile: 5%
VendorProductVersion
tibcoruntime_agent
𝑥
≤ 5.6.1
tibcoruntime_agent
5.4.0
tibcoruntime_agent
5.5.3
tibcoruntime_agent
5.5.4
tibcoruntime_agent
5.6
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://secunia.com/advisories/38191
http://www.securityfocus.com/bid/37805
http://www.tibco.com/mk/advisory.jsp
http://www.tibco.com/multimedia/security_advisory_runtime_agent_20100113_tcm8-10392.txt
http://www.vupen.com/english/advisories/2010/0128
http://secunia.com/advisories/38191
http://www.securityfocus.com/bid/37805
http://www.tibco.com/mk/advisory.jsp
http://www.tibco.com/multimedia/security_advisory_runtime_agent_20100113_tcm8-10392.txt
http://www.vupen.com/english/advisories/2010/0128