CVE-2016-6267

CVE-2016-6267 affects Trend Micro Smart Protection Server (SnmpUtils) prior to specific builds: 2.5 before 2200, 2.6 before 2106, and 3.0 before 1330. The vulnerability allows remote authenticated users to execute arbitrary commands via shell metacharacters in admin_notification.php parameters (s...

CVE-2016-6266

cccaajaxhandler.php in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the 1 host or 2 apikey parameter in a register action, 3 enable parameter ...

CVE-2016-6266

Technical details sufficient to assess the vulnerability are not publicly provided in the supplied documents; please monitor for updates.

CVE-2016-6268

CVE-2016-6268 affects Trend Micro Smart Protection Server prior to build 2200 (2.5), prior to build 2106 (2.6), and prior to build 1330 (3.0). The vulnerability allows local web server users to execute arbitrary code with root privileges through a Trojan horse ".war" file placed in the Solr webap...

CVE-2016-6269

Multiple directory traversal vulnerabilities in Trend Micro Smart Protection Server 2.5 before build 2200, 2.6 before build 2106, and 3.0 before build 1330 allow remote attackers to read and delete arbitrary files via the tmpfname parameter to 1 logmgtadhocqueryajaxhandler.php, 2...

Trend Micro Smart Protection Server admin_notification.php Command Injection (CVE-2016-6267)

A remote code execution vulnerability exists in the adminnotification.php script of Trend Micro Smart Protection Server. The vulnerability is due to insufficient validation of user-supplied input. A remote, authenticated attacker could exploit this vulnerability by providing crafted input to the...

Multiple Vulnerabilities in Trend Micro Smart Protection Server

Trend Micro Smart Protection Server is a server that provides smart protection. Trend Micro Smart Protection Server has multiple security vulnerabilities that can be exploited by remote attackers to submit a special request to view arbitrary system files, execute arbitrary code, and gain privileg...

Trend Micro Smart Protection Server Remote Code Execution Vulnerability

Trend Micro Smart Protection Server is an endpoint protection suite. A remote code execution vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to execute arbitrary code...

Trend Micro Smart Protection Server Elevation of Privilege Vulnerability

Trend Micro Smart Protection Server is an endpoint protection suite. An elevation of privilege vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to gain elevated privileges...

Trend Micro Smart Protection Server Directory Traversal Vulnerability

Trend Micro Smart Protection Server is an endpoint protection suite. A directory traversal vulnerability exists in Trend Micro Smart Protection Server. An attacker can exploit the vulnerability to retrieve arbitrary files in the context of an application on an affected system using a specially...

Trend Micro Smart Protection Server Exec Remote Code Injection

This module exploits a vulnerability found in TrendMicro Smart Protection Server where untrusted inputs are fed to ServWebExec system command, leading to command injection. Please note: authentication is required to exploit this vulnerability. This module requires Metasploit:...