CVE-2007-1666

Published: Mar 24, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The processor_request function in the debugger server for DataRescue IDA Pro 5.0 and 5.1 does not verify that authentication has taken place before invoking the perform_request function, which allows remote attackers to perform unauthorized actions.

Affected (2)

Products: Datarescue: Ida Pro

Datarescue

1 product

Ida Pro

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Datarescue Ida Pro	Version 5.0
Datarescue Ida Pro	Version 5.1

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (16)

http://labs.idefense.com/intelligence/vulnerabilities/

Source: cve@mitre.org

http://secunia.com/advisories/24635

Source: cve@mitre.org

Vendor Advisory

http://www.datarescue.com/freefiles/ida_remdeb_fix_22032007.zip

Source: cve@mitre.org

Patch

http://www.osvdb.org/33523

Source: cve@mitre.org

http://www.securityfocus.com/bid/23114

Source: cve@mitre.org

http://www.securitytracker.com/id?1017815

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2007/1089

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33190

Source: cve@mitre.org

http://labs.idefense.com/intelligence/vulnerabilities/