suresync has reported a vulnerability in Progress, which can be exploited by malicious people to cause a DoS (Denial of Service).

The vulnerability is caused due to an error in the database executable "_mprosrv" when processing malformed TCP packets. This can be exploited to cause a heap-based buffer overflow and crash the server.

The vulnerability is reported in versions prior to 9.1E0422 and 10.1B01.

Solution
Update to version 9.1E0422 or 10.1B01.

Provided and/or discovered by
suresync

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.psdn.com/library/servlet/KbServlet/download/2629-102-4821/README_101B_01.pdf

http://archives.neohapsis.com/archives/bugtraq/2007-06/0346.html

Deep Links
Links available to Secunia VIM customers