PT-2007-4752 · Progress · Openedge

Publicado 2007-06-29 · Atualizado 2018-10-16 · CVE-2007-3491

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Progress Software OpenEdge versions prior to 9.1E0422 Progress Software OpenEdge versions 10.x prior to 10.1B01

Description A buffer overflow issue exists in the mprosrv component, allowing remote attackers to send a malformed TCP/IP message, which may have an unknown impact on the system.

Recommendations For versions prior to 9.1E0422, update to version 9.1E0422 or later. For versions 10.x prior to 10.1B01, update to version 10.1B01 or later.

Correção

Identificadores relacionados

CVE-2007-3491

Produtos afetados

Openedge

Referências · 7

• http://psdn.com/library/servlet/KbServlet/download/2629-102-4821/README_101B_01.pdf · Nota
• http://osvdb.org/37747 · Nota
• http://securityfocus.com/archive/1/472349/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-3491 · Nota de Segurança
• http://securityreason.com/securityalert/2851 · Nota
• http://secunia.com/advisories/25865 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35104 · Nota