PT-2007-5666 · Trend Micro · Trend Micro Serverprotect

Published 2007-08-22 · Updated 2017-07-29 · CVE-2007-4490

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect version 5.58 for Windows before Security Patch 4

Description The issue involves multiple buffer overflows in the EarthAgent.exe component. These overflows can be triggered by remote attackers through specific RPC function calls, including (1) RPCFN EVENTBACK DoHotFix and (2) CMD CHANGE AGENT REGISTER INFO. The impact of these buffer overflows is not specified.

Recommendations For Trend Micro ServerProtect version 5.58 for Windows before Security Patch 4, apply Security Patch 4 to resolve the issue.

Fix

Related Identifiers

CVE-2007-4490

Affected Products

Trend Micro Serverprotect

References · 7

• http://secunia.com/advisories/26523 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4490 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-4490 · Note
• http://vupen.com/english/advisories/2007/2934 · Note
• http://securityreason.com/securityalert/3052 · Note
• http://trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36181 · Note