Lucene search

Japan Vulnerability NotesJVN:07676450

HistoryOct 01, 2015 - 12:00 a.m.

JVN#07676450: Canary Labs Trend Web Server vulnerable to buffer overflow

2015-10-0100:00:00

Japan Vulnerability Notes

jvn.jp

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.4%

JSON

Trend Web Server provided by Canary Labs is a solution used for data visualization. Trend Web Server contains a buffer overflow (CWE-119) vulnerability.

Impact

A remote attacker may cause a denial-of-service (DoS) or execute arbitrary code when sending a specially crafted TCP packet.

Solution

Stop using Trend Web Server
According to the developer, Trend Web Server is no longer being developed. Please consider using another solution.

Products Affected

Trend Web Server versions prior to 9.5.2

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.022 Low

EPSS

Percentile

89.4%

JSON

Related for JVN:07676450