Trend Micro ServerProtect CMON_ActiveUpdate buffer overflow

Added: 06/18/2007 CVE: CVE-2007-1070 BID: 22639 OSVDB: 33042 Background Trend Micro ServerProtect is a virus scanner for servers. Problem A buffer overflow vulnerability in the CMONActiveUpdate and CMONActiveRollback functions allows remote attackers to execute arbitrary commands by sending a...

Trend Micro ServerProtect EarthAgent RPC buffer overflow

Added: 05/16/2007 CVE: CVE-2007-2508 BID: 23866 OSVDB: 35789 Background Trend Micro ServerProtect is a virus scanner for servers. It includes the EarthAgent daemon which listens for connections on port 3628/TCP. Problem A buffer overflow vulnerability in the EarthAgent daemon allows remote...

Trend Micro ServerProtect EarthAgent RPC buffer overflow

Added: 05/16/2007 CVE: CVE-2007-2508 BID: 23866 OSVDB: 35789 Background Trend Micro ServerProtect is a virus scanner for servers. It includes the EarthAgent daemon which listens for connections on port 3628/TCP. Problem A buffer overflow vulnerability in the EarthAgent daemon allows remote...

Trend Micro ServerProtect EarthAgent RPC buffer overflow

Added: 05/16/2007 CVE: CVE-2007-2508 BID: 23866 OSVDB: 35789 Background Trend Micro ServerProtect is a virus scanner for servers. It includes the EarthAgent daemon which listens for connections on port 3628/TCP. Problem A buffer overflow vulnerability in the EarthAgent daemon allows remote...

Trend Micro ServerProtect EarthAgent RPC buffer overflow

Added: 05/16/2007 CVE: CVE-2007-2508 BID: 23866 OSVDB: 35789 Background Trend Micro ServerProtect is a virus scanner for servers. It includes the EarthAgent daemon which listens for connections on port 3628/TCP. Problem A buffer overflow vulnerability in the EarthAgent daemon allows remote...

Trend Micro ServerProtect EarthAgent.exe远程栈缓冲区溢出漏洞

Trend ServerProtect是一款企业级反病毒程序。 Trend ServerProtect的DCE/RPC接口实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制服务器。 ServerProtect默认绑定在TCP 3628端口上的EarthAgent.exe守护程序通过TmRpcSrv.dll暴露以下DCE/RPC接口： / opcode: 0x00, address: 0x65741030 / errorstatust sub65741030 in handlet arg1, in long arg2, insizeisarg4 byte arg3, in long...

Buffer overflow

Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the 1 the RPCFNActiveRollback function in a stcommon.dll, or the 2 ENGSetRealTimeScanConfigInfo or 3 ENGSendEmail...

CVE-2007-2533

Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the 1 the RPCFNActiveRollback function in a stcommon.dll, or the 2 ENGSetRealTimeScanConfigInfo or 3 ENGSendEmail...

Trend Micro ServerProtect EarthAgent RPC Request Remote Buffer Overflow

The remote version of Trend Micro ServerProtect is vulnerable to a stack overflow involving its EarthAgent service. An unauthenticated, remote attacker may be able to leverage this issue with specially- crafted RPC requests to execute arbitrary code on the remote host. Note that by default, Trend...

Trend Micro ServerProtect multiple security vulnerabilities

SpntSvc.exe TCP/5168 buffer overflow. Buffer overflow in EarthAgent.exe TCP/3628...

ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability

ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-024.html May 7, 2007 -- CVE ID: CVE-2007-2508 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...

ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability

ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-025.html May 7, 2007 -- CVE ID: CVE-2007-2508 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...

CVE-2007-2533

Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the 1 the RPCFNActiveRollback function in a stcommon.dll, or the 2 ENGSetRealTimeScanConfigInfo or 3 ENGSendEmail...

Trend Micro ServerProtect SpntSvc buffer overflow vulnerability

Overview Trend Micro ServerProtect contains a buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code on a vulnerable system. Description Trend Micro ServerProtect is an anti-virus application that is designed to run on Windows-based servers. The...

CVE-2007-2533

Trend Micro ServerProtect 5.58 is affected by multiple buffer overflows exploitable via a crafted RPC message processed by (1) RPCFN_ActiveRollback in stcommon.dll, (2) ENG_SetRealTimeScanConfigInfo, or (3) ENG_SendEmail in eng50.dll. The vulnerabilities allow remote code execution with network a...

Trend Micro ServerProtect AgRpcCln.dll Buffer Overflow

The remote version of Trend Micro ServerProtect is vulnerable to a stack overflow involving the 'wcscpy' function of the routine 'CAgRpcClient::CreateBinding' in AgRpcCln.dll library. An unauthenticated, remote attacker may be able to leverage this issue with specially crafted RPC requests to its...

CVE-2007-2508

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

Buffer overflow

Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...

Stack overflow

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

Immunity Canvas: TM_SPROTECTAGENT

Name| tmsprotectagent ---|--- CVE| CVE-2007-2508 Exploit Pack| CANVAS Description| Trend Micro ServerProtect Agent RPC Overflow Notes| CVE Name: CVE-2007-2508 VENDOR: Trend Micro Notes: Platforms Tested: References: http://www.tippingpoint.com/security/advisories/TSRT-07-025.html CVE Url:...