PT-2007-4752 · Progress · Openedge

Published 2007-06-29 · Updated 2018-10-16 · CVE-2007-3491

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Progress Software OpenEdge versions prior to 9.1E0422 Progress Software OpenEdge versions 10.x prior to 10.1B01

Description A buffer overflow issue exists in the mprosrv component, allowing remote attackers to send a malformed TCP/IP message, which may have an unknown impact on the system.

Recommendations For versions prior to 9.1E0422, update to version 9.1E0422 or later. For versions 10.x prior to 10.1B01, update to version 10.1B01 or later.

Fix

Related Identifiers

CVE-2007-3491

Affected Products

Openedge

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2007-3491 · Security Note
• http://psdn.com/library/servlet/KbServlet/download/2629-102-4821/README_101B_01.pdf · Note
• http://osvdb.org/37747 · Note
• http://securityfocus.com/archive/1/472349/100/0/threaded · Note
• http://securityreason.com/securityalert/2851 · Note
• http://secunia.com/advisories/25865 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35104 · Note