CVE-2007-2602: Buffer Overflow
Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute arbitrary code via a long MIB filename argument. NOTE: If there is not a common scenario under which MIBEXTRA.EXE is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-2602?
CVE-2007-2602 is classified as a critical vulnerability due to its potential to allow remote code execution and lead to a denial of service.
How do I fix CVE-2007-2602?
To address CVE-2007-2602, update to the latest version of Progress WhatsUp Gold that patches this buffer overflow vulnerability.
What systems are affected by CVE-2007-2602?
CVE-2007-2602 affects Progress WhatsUp Gold version 11 on Windows systems.
What type of attack is possible with CVE-2007-2602?
An attacker can exploit CVE-2007-2602 through a specially crafted long MIB filename argument that may result in application crashes or arbitrary code execution.
Is there a workaround for CVE-2007-2602?
Currently, no specific workaround is recommended, so applying available security updates is the best practice to mitigate CVE-2007-2602.