| ID |
CVE-2007-2417
|
| Summary |
Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets. NOTE: this issue might overlap CVE-2007-3491. |
| References |
|
| Vulnerable Configurations |
-
cpe:2.3:h:rsa:securid:2.0:*:*:*:*:*:*:*
cpe:2.3:h:rsa:securid:2.0:*:*:*:*:*:*:*
-
cpe:2.3:a:progress:openedge:10.1a:*:*:*:*:*:*:*
cpe:2.3:a:progress:openedge:10.1a:*:*:*:*:*:*:*
-
cpe:2.3:a:progress:openedge:10.1b:*:*:*:*:*:*:*
cpe:2.3:a:progress:openedge:10.1b:*:*:*:*:*:*:*
-
cpe:2.3:a:progress:progress:9.1e:*:*:*:*:*:*:*
cpe:2.3:a:progress:progress:9.1e:*:*:*:*:*:*:*
-
cpe:2.3:a:rsa:ace_server:5.2:*:*:*:*:*:*:*
cpe:2.3:a:rsa:ace_server:5.2:*:*:*:*:*:*:*
|
| CVSS |
| Base: | 10.0 (as of 27-03-2020 - 14:07) |
| Impact: | |
| Exploitability: | |
|
| CWE |
NVD-CWE-Other |
| CAPEC |
|
| Access |
| Vector | Complexity | Authentication |
| NETWORK |
LOW |
NONE |
|
| Impact |
| Confidentiality | Integrity | Availability |
| COMPLETE |
COMPLETE |
COMPLETE |
|
| cvss-vector
via4
|
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
| refmap
via4
|
| bid | 24675 | | bugtraq | 20070713 TPTI-07-12: Multiple Vendor Progress Server Heap Overflow Vulnerability | | misc | http://dvlabs.tippingpoint.com/advisory/TPTI-07-12 | | osvdb | 37934 | | sectrack | 1018389 | | secunia | | | vupen | - ADV-2007-2530
- ADV-2007-2531
| | xf | multiple-progress-server-bo(35385) |
|
| Last major update |
27-03-2020 - 14:07 |
| Published |
15-07-2007 - 21:30 |
| Last modified |
27-03-2020 - 14:07 |
