Heap Overflow Vulnerability in Progress Software Used by RSA Authentication Manager and SecurID Appliance

CVE-2007-2417

Summary

A heap-based buffer overflow exists in the _mprosrv.exe component of Progress Software's products, such as RSA Authentication Manager and SecurID Appliance. This vulnerability can be exploited by remote attackers sending crafted packets, which may lead to the execution of arbitrary code on the compromised system. Various versions of Progress Software—including Progress 9.1E, OpenEdge 10.1x, and specific versions of RSA Authentication Manager—are susceptible to this issue, which could also potentially affect other products in the same ecosystem. This security concern highlights the importance of keeping software updated and monitoring for intrusion attempts.

References