CVE-2017-9036

Trend Micro ServerProtect for Linux 3.0 before CP 1531 contains a local privilege escalation flaw (CVE-2017-9036) where the Web-based Management Console allows the Quarantine directory to be set to any location. Root-owned files moved there can be written by a local user, enabling privilege escal...

CVE-2017-9032

Multiple cross-site scripting XSS vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the 1 T1 or 2 tmLastConfigFileModifiedDate parameter to logmanagement.cgi...

CVE-2017-9035

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers...

CVE-2017-9037

CVE-2017-9037 affects Trend Micro ServerProtect for Linux 3.0 prior to CP 1531. The advisory/related reports document cross-site scripting vulnerabilities in notification.cgi and related CGI scripts, enabling an attacker to inject arbitrary script/HTML via parameters such as S44, S5, S_action_fai...

CVE-2017-9034

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates...

CVE-2017-9037

Multiple cross-site scripting XSS vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the 1 S44, 2 S5, 3 Sactionfail, 4 Sptnupdate, 5 T113, 6 T114, 7 T115, 8 T117117, 9 T118, 10 Tactionfail, 11 Tptnupdate, 12...

Trend Micro ServerProtect for Linux Cross-Site Scripting Vulnerability

Trend Micro ServerProtect for Linux is a Trend Micro Trend Micro company for Linux in the virus before reaching the end-user to be blocked to prevent the expansion of the entire network of antivirus software. A cross-site scripting vulnerability exists in Trend Micro ServerProtect for Linux versi...

Trend Micro ServerProtect for Linux Arbitrary File Write Vulnerability

Trend Micro ServerProtect for Linux is a Trend Micro Trend Micro company for Linux in the virus before reaching the end-user to be blocked to prevent the expansion of the entire network of antivirus software. A security vulnerability exists in Trend Micro ServerProtect for Linux version 3.0. The...

Trend Micro ServerProtect for Linux Information Disclosure Vulnerability

Trend Micro ServerProtect for Linux is a Trend Micro Trend Micro company for Linux in the virus before reaching the end-user to be blocked to prevent the expansion of the entire network of antivirus software. A security vulnerability exists in Trend Micro ServerProtect for Linux version 3.0. The...

PT-2017-18657

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests to start an update from any source via a crafted request to...

PT-2017-18658

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux versions 3.0 before CP 1531 Description The issue allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers. Recommendations For Trend Micro...

PT-2017-18656

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description The issue allows remote attackers to inject arbitrary web script or HTML via the T1 or tmLastConfigFileModifiedDate parameter to the "log management.cgi" API endpoint...

PT-2017-18660

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description The issue allows remote attackers to inject arbitrary web script or HTML via multiple parameters to the notification.cgi endpoint, including S44, S5, S action fail, S p...

PT-2017-18659

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description The issue allows local users to gain privileges by leveraging an unrestricted quarantine directory. Recommendations For Trend Micro ServerProtect for Linux version 3.0...

Trend Micro ServerProtect for Linux Local Privilege Gain Vulnerability

Trend Micro ServerProtect for Linux is a Trend Micro Trend Micro in the United States, the company's antivirus software for Linux in the virus to be blocked before it reaches the end user to prevent the expansion of the entire network. A security vulnerability exists in Trend Micro ServerProtect...

Trend Micro ServerProtect for Linux Cross-Site Scripting Vulnerability (CNVD-2017-08788)

Trend Micro ServerProtect for Linux is a Trend Micro Trend Micro company for Linux in the virus before reaching the end-user to be blocked to prevent the expansion of the entire network of antivirus software. A cross-site scripting vulnerability exists in Trend Micro ServerProtect for Linux versi...

Trend Micro ServerProtect for Linux Cross-Site Request Forgery Vulnerability

Trend Micro ServerProtect for Linux is a Trend Micro Trend Micro company for Linux in the virus before reaching the end-user to be blocked to prevent the expansion of the entire network of antivirus software. A cross-site request forgery vulnerability exists in Trend Micro ServerProtect for Linux...

Trend Micro ServerProtect for Linux Cross-Site Request Forgery Vulnerability (CNVD-2017-10385)

Trend Micro ServerProtect for Linux is an enterprise-grade anti-virus program that runs on Linux. Trend Micro ServerProtect for Linux suffers from a cross-site request forgery vulnerability. A remote attacker can exploit this vulnerability by using creating specially crafted HTML pages or URLs...

Trend Micro ServerProtect Multiple Vulnerabilities

Advisory ID Internal CORE-2017-0002 1. Advisory Information Title: Trend Micro ServerProtect Multiple Vulnerabilities Advisory ID: CORE-2017-0002 Advisory URL:https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities Date published: 2017-05-23 Date of last update:...

Unspecified Cross-Site Scripting Vulnerability in Trend Micro ServerProtect for Linux

Trend Micro ServerProtect for Linux is an enterprise-grade anti-virus program that runs on Linux. An unspecified cross-site scripting vulnerability exists in Trend Micro ServerProtect for Linux, which is caused by a failure to validate user-submitted data. The vulnerability can be exploited to...