A vulnerability has been reported in TIBCO Enterprise Message Service, which can be exploited by malicious, local users to gain escalated privileges.

The vulnerability is caused due to an unspecified error related to SUID in the TIBCO Enterprise Message Service server (tibemsd) component. No further information is currently available.

The vulnerability is reported in the following products:
* TIBCO Enterprise Message Service versions 5.1.0 through 6.0.0 (Unix-based platforms only)
* TIBCO Silver BPM Service versions prior to 1.0.4
* TIBCO Silver CAP Service versions prior to 1.0.2
* TIBCO Silver BusinessWorks Service version 1.0.0

Solution
Update to a fixed version.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Original Advisory
http://www.tibco.com/services/support/advisories/rv-ems-advisory_20110201.jsp
http://www.tibco.com/multimedia/rv_ems_security_advisory_20110201_tcm8-13185.txt

Deep Links
Links available to Secunia VIM customers