| Package | Affected versions | Patched versions |
|---|---|---|
| openedge | = 10.1a= 10.1b | |
| progress | = 9.1e | |
| ace server | = 5.2 |
Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets. NOTE: this issue might overlap CVE-2007-3491.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free