PT-2007-3749 · Rsa+1 · Ace/Server+4

Published 2007-07-15 · Updated 2020-03-27 · CVE-2007-2417

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Progress 9.1E OpenEdge 10.1x RSA Authentication Manager versions 6.0 and 6.1 SecurID Appliance version 2.0 ACE/Server version 5.2

Description A heap-based buffer overflow issue in the mprosrv.exe component allows remote attackers to execute arbitrary code via crafted packets. This issue may be related to other products beyond those listed.

Recommendations For Progress 9.1E, update to a version that addresses this issue. For OpenEdge 10.1x, update to a version that addresses this issue. For RSA Authentication Manager versions 6.0 and 6.1, update to a version that addresses this issue. For SecurID Appliance version 2.0, update to a version that addresses this issue. For ACE/Server version 5.2, update to a version that addresses this issue.

Fix

Related Identifiers

CVE-2007-2417

Affected Products

Ace/Server

Openedge

Progress

Emc Rsa Authentication Manager

Securid Appliance

References · 11

• http://secunia.com/advisories/26067 · Vendor Advisory
• http://dvlabs.tippingpoint.com/advisory/TPTI-07-12 · Vendor Advisory
• http://secunia.com/advisories/26058 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-2417 · Security Note
• http://securityfocus.com/bid/24675 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35385 · Note
• http://vupen.com/english/advisories/2007/2531 · Note
• http://securityfocus.com/archive/1/473623/100/0/threaded · Note
• http://vupen.com/english/advisories/2007/2530 · Note
• http://securitytracker.com/id?1018389 · Note
• http://osvdb.org/37934 · Note