PT-2021-16464

Name of the Vulnerable Software and Affected Versions: Trend Micro ServerProtect for Linux version 3.0 Description: A memory exhaustion issue could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan...

PT-2021-16463

Name of the Vulnerable Software and Affected Versions: Trend Micro ServerProtect for Linux version 3.0 Description: A memory exhaustion issue could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a schedule...

PT-2021-16462

Name of the Vulnerable Software and Affected Versions: Trend Micro ServerProtect for Linux version 3.0 Description: A memory exhaustion issue could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual...

CVE-2021-25224: Uncontrolled Resource Consumption

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a manual scan component. An attacker must first obtain the ability to execu...

CVE-2021-25226: Uncontrolled Resource Consumption

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scan engine component. An attacker must first obtain the ability to execu...

CVE-2021-25225: Uncontrolled Resource Consumption

A memory exhaustion vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow a local attacker to craft specific files that can cause a denial-of-service on the affected product. The specific flaw exists within a scheduled scan component. An attacker must first obtain the ability to...

CVE-2020-28575: Out-of-bounds Write

A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this...

PT-2020-17018

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 Description A heap-based buffer overflow privilege escalation issue may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute...

PT-2020-15736

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 Description A command injection issue could allow an attacker to execute arbitrary code on an affected system. The attacker must first obtain admin/root privileges on the SPLX console to exploit...

CVE-2020-24561: Improper Neutralization of Special Elements used in a Command

A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system. An attacker must first obtain admin/root privileges on the SPLX console to exploit this vulnerability...

CVE-2017-9032: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the 1 T1 or 2 tmLastConfigFileModifiedDate parameter to logmanagement.cgi...

CVE-2017-9037: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allow remote attackers to inject arbitrary web script or HTML via the 1 S44, 2 S5, 3 Sactionfail, 4 Sptnupdate, 5 T113, 6 T114, 7 T115, 8 T117117, 9 T118, 10 Tactionfail, 11 Tptnupdate, 12...

CVE-2017-9036: Missing Authorization

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory...

CVE-2017-9033: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack the authentication of users for requests to start an update from an arbitrary source via a crafted request to SProtectLinux/scanoptionset.cgi, related to the...

CVE-2017-9034: Improper Input Validation

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates...

CVE-2017-9035: Cleartext Transmission of Sensitive Information

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers...

PT-2017-18657

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description A cross-site request forgery CSRF issue allows remote attackers to hijack user authentication for requests to start an update from any source via a crafted request to...

PT-2017-18658

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux versions 3.0 before CP 1531 Description The issue allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers. Recommendations For Trend Micro...

PT-2017-18656

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description The issue allows remote attackers to inject arbitrary web script or HTML via the T1 or tmLastConfigFileModifiedDate parameter to the "log management.cgi" API endpoint...

PT-2017-18659

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description The issue allows local users to gain privileges by leveraging an unrestricted quarantine directory. Recommendations For Trend Micro ServerProtect for Linux version 3.0...