Lucene search

K
cve[email protected]CVE-2007-2417
HistoryJul 15, 2007 - 9:30 p.m.

CVE-2007-2417

2007-07-1521:30:00
NVD-CWE-Other
web.nvd.nist.gov
18
cve-2007-2417
progress software
openedge
rsa authentication manager
securid appliance
ace/server
buffer overflow
remote code execution

8.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.182 Low

EPSS

Percentile

96.1%

Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets. NOTE: this issue might overlap CVE-2007-3491.

8.4 High

AI Score

Confidence

Low

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.182 Low

EPSS

Percentile

96.1%

Related for CVE-2007-2417