CVE-2007-2602 Memory corruption in n/a

What is CVE-2007-2602?

CVE-2007-2602 is a high-severity memory corruption vulnerability in Progress Whatsup Gold, published on 11 May 2007.

Official description

Buffer overflow in MIBEXTRA.EXE in Ipswitch WhatsUp Gold 11 allows attackers to cause a denial of service (application crash) or execute arbitrary code via a long MIB filename argument. NOTE: If there is not a common scenario under which MIBEXTRA.EXE is called with attacker-controlled command line arguments, then perhaps this issue should not be included in CVE.

Which versions are affected by CVE-2007-2602?

It affects 1 product.

Products include Progress Whatsup Gold.

How do I fix CVE-2007-2602?

No fix has been published for CVE-2007-2602 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2007-2602 being exploited?

There is no known exploitation of CVE-2007-2602 in the wild and no public exploit code.

Other vulnerabilities in Progress Whatsup Gold

• CVE-2024-6670 Progress WhatsUp Gold SQL Injection Exploited Critical 9.8
• CVE-2024-4885 Progress WhatsUp Gold Path Traversal Exploited Critical 9.8
• CVE-2024-46909 WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution Vulnerability Critical 9.8
• CVE-2024-8785 WhatsUp Gold Registry Overwrite Remote Code Execution Vulnerability Critical 9.8
• CVE-2024-7763 WhatsUp Gold getReport Missing Authentication Authentication Bypass Vulnerability Critical 9.8

All Progress Whatsup Gold vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-hg6j-xggx-2xw6.