PT-2007-2596 · Trend Micro · Trend Micro Serverprotect For Linux

Published 2007-02-28 · Updated 2008-09-05 · CVE-2007-1169

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux (SPLX) versions 1.25, 1.3, and 2.5 before 20070216

Description The issue allows remote attackers to potentially obtain credentials by sniffing the network, as the web interface in the affected software accepts logon requests through unencrypted HTTP.

Recommendations For versions 1.25, 1.3, and 2.5 before 20070216, consider disabling the web interface until a fix is available to prevent remote attackers from obtaining credentials. Restrict access to the web interface to minimize the risk of exploitation. Avoid using unencrypted HTTP for logon requests until the issue is resolved.

Fix

Related Identifiers

CVE-2007-1169

Affected Products

Trend Micro Serverprotect For Linux

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2007-1169 · Security Note
• http://trendmicro.com/download/product.asp?productid=20 · Patch
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-1169 · Note