CVE-2001-1129: High severity Progress Progress vulnerability

Published Nov 2, 2001

Updated

Format string vulnerabilities in (1) probuild, (2) dbutil, (3) mprosrv, (4) mprshut, (5) proapsv, (6) progres, (7) proutil, (8) rfutil and (9) prolib in Progress database 9.1C allows a local user to execute arbitrary code via format string specifiers in the file used by the PROMSGS environment variable.

Affected Software

1 affected component

Progress Progress=9.1c

Remediation

Patch Available

http://www.securityfocus.com/bid/3502

Event History

Nov 2, 2001

CVE Published

05:00 AM

Mar 15, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1129?

CVE-2001-1129 is considered a high severity vulnerability due to its potential for local code execution.

How do I fix CVE-2001-1129?

To fix CVE-2001-1129, update to a version of Progress database that is not affected by this vulnerability.

Who is affected by CVE-2001-1129?

CVE-2001-1129 affects local users of the Progress database version 9.1C.

What types of applications are impacted by CVE-2001-1129?

CVE-2001-1129 impacts various components including _probuild, _dbutil, and several other utilities in Progress database 9.1C.

What can an attacker achieve with CVE-2001-1129?

An attacker can potentially execute arbitrary code with local access due to the format string vulnerabilities in CVE-2001-1129.