The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attackers to gain privileges via wsisa.dll.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Webspeed | Progress | 3.0 (including) | 3.0 (including) |
References
- http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kbid=19412\u0026keywords=security%20Webspeed
- http://www.securityfocus.com/bid/969
- http://www.progress.com/services/support/cgi-bin/techweb-kbase.cgi/webkb.html?kbid=19412\u0026keywords=security%20Webspeed
- http://www.securityfocus.com/bid/969