CVE-2006-2829

MediumCVSS 6.8/10Last modified Jun 16, 2026

Description

Buffer overflow in Hawk Monitoring Agent (HMA) for TIBCO Hawk before 4.6.1 and TIBCO Runtime Agent (TRA) before 5.4 allows authenticated users to execute arbitrary code via the configuration for tibhawkhma.

Metrics

CVSS 2.0 6.8/10AV:L/AC:L/Au:S/C:C/I:C/A:C

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://secunia.com/advisories/20431Vendor Advisory
http://securitytracker.com/id?1016223
http://www.kb.cert.org/vuls/id/620516Patch, US Government Resource
http://www.securityfocus.com/bid/18300
http://www.tibco.com/resources/mk/hawk_security_advisory.txtPatch, Vendor Advisory
http://www.vupen.com/english/advisories/2006/2156
https://exchange.xforce.ibmcloud.com/vulnerabilities/26938
http://secunia.com/advisories/20431Vendor Advisory
http://securitytracker.com/id?1016223
http://www.kb.cert.org/vuls/id/620516Patch, US Government Resource
http://www.securityfocus.com/bid/18300
http://www.tibco.com/resources/mk/hawk_security_advisory.txtPatch, Vendor Advisory
http://www.vupen.com/english/advisories/2006/2156
https://exchange.xforce.ibmcloud.com/vulnerabilities/26938

Timeline

Published: Jun 5, 2006
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2006

CVE-2006-28307.5Buffer overflow in TIBCO Rendezvous before 7.5.1, TIBCO Runtime Agent (TRA) before 5.4, and Hawk before 4.6.1 allows remote attackers to cau CVE-2006-28317.5Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2, when running under certain Apache configurations such as when FileInfo overrides are disab CVE-2006-28322.6Cross-site scripting (XSS) vulnerability in the upload module (upload.module) in Drupal 4.6.x before 4.6.8 and 4.7.x before 4.7.2 allows rem CVE-2006-28332.6Cross-site scripting (XSS) vulnerability in the taxonomy module in Drupal 4.6.8 and 4.7.2 allows remote attackers to inject arbitrary web sc CVE-2006-28347.5PHP remote file inclusion vulnerability in includes/common.php in gnopaste 0.5.3 and earlier allows remote attackers to execute arbitrary PH CVE-2006-28357.5SQL injection vulnerability in saphplesson 2.0 allows remote attackers to execute arbitrary SQL commands via the (1) forumid parameter in ad CVE-2006-28367.5SQL injection vulnerability in comment.php in Pineapple Technologies Lore 1.5.6 and earlier allows remote attackers to execute arbitrary SQL CVE-2006-28374.3Cross-site scripting (XSS) vulnerability in Techno Dreams Guest Book allows remote attackers to inject arbitrary web script or HTML via cert CVE-2006-28387.6Buffer overflow in the web console in F-Secure Anti-Virus for Microsoft Exchange 6.40, and Internet Gatekeeper 6.40 through 6.42 and 6.50 al CVE-2006-28396.4Directory traversal vulnerability in PG Problem Editor module (PGProblemEditor.pm) in WeBWorK Online Homework Delivery System 2.2.0 and earl CVE-2006-28406.8Cross-site scripting (XSS) vulnerability in (1) uploads.php and (2) "url links" in PmWiki 2.1.6 and earlier allows remote attackers to injec CVE-2006-28417.5Multiple PHP remote file inclusion vulnerabilities in AssoCIateD (aka ACID) CMS 1.1.3 allow remote attackers to execute arbitrary PHP code v