Remote exploitation of a stack based buffer overflow vulnerability in TIBCO Software Inc.'s SmartSockets RTserver could allow an attacker to execute arbitrary code with the privileges of the affected service.
The vulnerability occurs when parsing requests on the UDP interface of the RTserver.
Vulnerable Systems:
* SmartSockets RTserver version 4.0.10.1
Exploitation of this vulnerability results in the execution of arbitrary code with the privileges of the affected service, usually SYSTEM. No authentication is required to exploit this vulnerability. Since the vulnerability is a stack based buffer overflow, and there are no stack cookies, reliable exploitation is trivial.
Workaround
* Disable the rtserver UDP port if it has been enabled in the rtserver configuration file.
* Utilize a firewall to restrict access to the rtserver.
* Use a user with restricted privileges to invoke the rtserver or application.
* On Unix systems, invoke the server or application from a chroot environment. This will restrict the ability to access or modify information in the event of a successful exploit.
