Approved changes feed: RSS · Atom

cpe:2.3:a:progress:database:9.1:*:*:*:*:*:*:*

part: a version: 9.1 update: *

VendorProgress (f9d80521-f73f-5a85-8df9-9306f2f67809)
ProductDatabase (7cf9390c-a840-5ebe-84b3-ae5f5485cf34)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2003-0449 vulnerable 2026-06-03 14:26:25.580381 Details available
Progress Database 9.1 to 9.1D06 trusts user input to find and load libraries using dlopen, which allows local users to gain privileges via (1) a PATH environment variable that points to malicious libraries, as demonstrated using libjutil.so in_proapsv, or (2) the -installdir command line parameter, as demonstrated using librocket_r.so in _dbagent.
Published: 2003-06-20T04:00:00.000Z
Updated: 2024-08-08T01:50:48.193Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.