PT-2007-3852 · Trend Micro · Trend Micro Serverprotect

Published 2007-05-08 · Updated 2017-07-29 · CVE-2007-2533

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect version 5.58 before Security Patch 2- Build 1174

Description The issue is related to multiple buffer overflows that allow remote attackers to execute arbitrary code. This is achieved through a crafted RPC message processed by specific functions in certain DLL files. The affected functions include the RPCFN ActiveRollback function in stcommon.dll, and the ENG SetRealTimeScanConfigInfo or ENG SendEmail functions in eng50.dll.

Recommendations For Trend Micro ServerProtect version 5.58 before Security Patch 2- Build 1174, apply Security Patch 2- Build 1174 to resolve the issue. As a temporary workaround, consider restricting access to the RPCFN ActiveRollback function in stcommon.dll, and the ENG SetRealTimeScanConfigInfo or ENG SendEmail functions in eng50.dll to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-2533

Affected Products

Trend Micro Serverprotect

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2007-2533 · Security Note
• http://trendmicro.com/download_beta/product.asp?productid=17 · Patch
• http://trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34171 · Note
• http://vupen.com/english/advisories/2007/1689 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-2533 · Note
• http://osvdb.org/35792 · Note
• http://xforce.iss.net/xforce/xfdb/34171 · Note
• http://osvdb.org/35791 · Note
• http://frsirt.com/english/advisories/2007/1689 · Note