PT-2007-3749 · Rsa+1 · Ace/Server+4

Publicado 2007-07-15 · Atualizado 2020-03-27 · CVE-2007-2417

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Progress 9.1E OpenEdge 10.1x RSA Authentication Manager versions 6.0 and 6.1 SecurID Appliance version 2.0 ACE/Server version 5.2

Description A heap-based buffer overflow issue in the mprosrv.exe component allows remote attackers to execute arbitrary code via crafted packets. This issue may be related to other products beyond those listed.

Recommendations For Progress 9.1E, update to a version that addresses this issue. For OpenEdge 10.1x, update to a version that addresses this issue. For RSA Authentication Manager versions 6.0 and 6.1, update to a version that addresses this issue. For SecurID Appliance version 2.0, update to a version that addresses this issue. For ACE/Server version 5.2, update to a version that addresses this issue.

Correção

Identificadores relacionados

CVE-2007-2417

Produtos afetados

Ace/Server

Openedge

Progress

Emc Rsa Authentication Manager

Securid Appliance

Referências · 11

• http://securityfocus.com/bid/24675 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35385 · Nota
• http://vupen.com/english/advisories/2007/2531 · Nota
• http://securityfocus.com/archive/1/473623/100/0/threaded · Nota
• http://secunia.com/advisories/26067 · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/2530 · Nota
• http://securitytracker.com/id?1018389 · Nota
• http://dvlabs.tippingpoint.com/advisory/TPTI-07-12 · Aviso do Fabricante
• http://secunia.com/advisories/26058 · Aviso do Fabricante
• http://osvdb.org/37934 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2417 · Nota de Segurança