CVE-2007-2417

Heap-based buffer overflow in _mprosrv.exe in Progress Software Progress 9.1E and OpenEdge 10.1x, as used by the RSA Authentication Manager 6.0 and 6.1, SecurID Appliance 2.0, ACE/Server 5.2, and possibly other products, allows remote attackers to execute arbitrary code via crafted packets. NOTE: this issue might overlap CVE-2007-3491.

• http://dvlabs.tippingpoint.com/advisory/TPTI-07-12Patch, Vendor Advisory
• http://osvdb.org/37934
• http://secunia.com/advisories/26058Patch, Vendor Advisory
• http://secunia.com/advisories/26067Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/473623/100/0/threaded
• http://www.securityfocus.com/bid/24675
• http://www.securitytracker.com/id?1018389
• http://www.vupen.com/english/advisories/2007/2530
• http://www.vupen.com/english/advisories/2007/2531
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35385
• http://dvlabs.tippingpoint.com/advisory/TPTI-07-12Patch, Vendor Advisory
• http://osvdb.org/37934
• http://secunia.com/advisories/26058Patch, Vendor Advisory
• http://secunia.com/advisories/26067Patch, Vendor Advisory
• http://www.securityfocus.com/archive/1/473623/100/0/threaded
• http://www.securityfocus.com/bid/24675
• http://www.securitytracker.com/id?1018389
• http://www.vupen.com/english/advisories/2007/2530
• http://www.vupen.com/english/advisories/2007/2531
• https://exchange.xforce.ibmcloud.com/vulnerabilities/35385

Published

Jul 15, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2411PHP remote file inclusion vulnerability in index.php in Sphi…
• CVE-2007-2412Directory traversal vulnerability in modules/file.php in Sei…
• CVE-2007-2413Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2007-2414MyServer before 0.8.8 allows remote attackers to cause a den…
• CVE-2007-2415Pi3Web Web Server 2.0.3 PL1 allows remote attackers to cause…
• CVE-2007-2416SQL injection vulnerability in home.php in E-Annu allows rem…
• CVE-2007-2418Heap-based buffer overflow in the Rendezvous / Extensible Me…
• CVE-2007-2419Multiple buffer overflows in an ActiveX control (boisweb.dll…
• CVE-2007-2420SQL injection vulnerability in bry.asp in Burak Yilmaz Blog …
• CVE-2007-2421Buffer overflow in Hitachi Groupmax Mobile Option for Mobile…
• CVE-2007-2422Multiple PHP remote file inclusion vulnerabilities in Module…9.8
• CVE-2007-2423Cross-site scripting (XSS) vulnerability in index.php in Moi…