PT-2007-3852 · Trend Micro · Trend Micro Serverprotect

Publicado 2007-05-08 · Atualizado 2017-07-29 · CVE-2007-2533

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect version 5.58 before Security Patch 2- Build 1174

Description The issue is related to multiple buffer overflows that allow remote attackers to execute arbitrary code. This is achieved through a crafted RPC message processed by specific functions in certain DLL files. The affected functions include the RPCFN ActiveRollback function in stcommon.dll, and the ENG SetRealTimeScanConfigInfo or ENG SendEmail functions in eng50.dll.

Recommendations For Trend Micro ServerProtect version 5.58 before Security Patch 2- Build 1174, apply Security Patch 2- Build 1174 to resolve the issue. As a temporary workaround, consider restricting access to the RPCFN ActiveRollback function in stcommon.dll, and the ENG SetRealTimeScanConfigInfo or ENG SendEmail functions in eng50.dll to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-2533

Produtos afetados

Trend Micro Serverprotect

Referências · 10

• https://exchange.xforce.ibmcloud.com/vulnerabilities/34171 · Nota
• http://vupen.com/english/advisories/2007/1689 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2533 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-2533 · Nota de Segurança
• http://osvdb.org/35792 · Nota
• http://xforce.iss.net/xforce/xfdb/34171 · Nota
• http://osvdb.org/35791 · Nota
• http://trendmicro.com/download_beta/product.asp?productid=17 · Correção
• http://trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt · Aviso do Fabricante
• http://frsirt.com/english/advisories/2007/1689 · Nota