Secunia

suresync has reported a vulnerability and a security issue in Progress, which can be exploited by malicious people to disclose potentially sensitive information and to manipulate data.

Input passed to the "WService" parameter in scripts/cgiip.exe in Progress Webspeed Messenger is not properly verified before being used. This can be exploited to read and modify arbitrary files by invoking /webutil/_cpyfile.p via the said parameter.

Successful exploitation allows execution of arbitrary Webspeed code.

This vulnerability is reported in Progress releases prior to version 10.

It is also possible to disclose the operating system and the Progress version of a Webspeed server by invoking /webutil/about.r via the said parameter.

This security issue reportedly affects all Progress releases.

Solution
Upgrade to version 10.
Further details available in Customer Area

Provided and/or discovered by
suresync

Changelog
Further details available in Customer Area

Original Advisory
http://www.ishare.nl/

Deep Links
Links available in Customer Area