PT-2017-18656

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description The issue allows remote attackers to inject arbitrary web script or HTML via the T1 or tmLastConfigFileModifiedDate parameter to the "log management.cgi" API endpoint...

PT-2017-2910

Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 before CP 1531 Description The issue exists due to insufficient input validation, allowing a remote attacker to modify arbitrary files or execute arbitrary code with root privileges by exploiting...

CVE-2007-1168: Undefined Security Weakness

Trend Micro ServerProtect for Linux SPLX 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx2376info cookie to the web interface port 14942/tcp...

CVE-2007-1169: Undefined Security Weakness

The web interface in Trend Micro ServerProtect for Linux SPLX 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the network...