PT-2007-5666 · Trend Micro · Trend Micro Serverprotect

Publicado 2007-08-22 · Atualizado 2017-07-29 · CVE-2007-4490

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect version 5.58 for Windows before Security Patch 4

Description The issue involves multiple buffer overflows in the EarthAgent.exe component. These overflows can be triggered by remote attackers through specific RPC function calls, including (1) RPCFN EVENTBACK DoHotFix and (2) CMD CHANGE AGENT REGISTER INFO. The impact of these buffer overflows is not specified.

Recommendations For Trend Micro ServerProtect version 5.58 for Windows before Security Patch 4, apply Security Patch 4 to resolve the issue.

Correção

Identificadores relacionados

CVE-2007-4490

Produtos afetados

Trend Micro Serverprotect

Referências · 7

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4490 · Nota
• http://vupen.com/english/advisories/2007/2934 · Nota
• http://securityreason.com/securityalert/3052 · Nota
• http://secunia.com/advisories/26523 · Aviso do Fabricante
• http://trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36181 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4490 · Nota de Segurança