Eelko Neven has reported some vulnerabilities in Progress, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerabilities are caused due to an infinite loop when WebSpeed agents call _edit, _admin, _comp, _dict, dict, or _help with no additional parameter. These can be exploited to cause a DoS due to CPU exhaustion by requesting specially crafted URLs.

The vulnerabilities are reported in Progress 9.1e and 10b. Other versions may also be affected.

Solution
Filter malicious URLs using a proxy or firewall.
Further details available to Secunia VIM customers

Provided and/or discovered by
Eelko Neven

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.ishare.nl/

Deep Links
Links available to Secunia VIM customers