CVE-2007-2506 in WebSpeed
Summary
WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress 9.1e, and certain other 9.x versions, allows remote attackers to cause a denial of service (infinite loop and daemon hang) via a messenger URL that invokes _edit.r with no additional parameters, as demonstrated by requests for cgiip.exe or wsisa.dll with WService=wsbroker1/_edit.r in the PATH_INFO.
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
05/03/2007
Disclosure
05/03/2007
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 36610 | Progress WebSpeed cgiip.exe denial of service | 404 | Proof-of-Concept | Not defined | CVE-2007-2506 |