Trend Micro ServerProtect RPC NTF_SetPagerNotifyConfig buffer overflow

Added: 08/23/2007 CVE: CVE-2007-4218 BID: 25395 OSVDB: 39754 Background ServerProtect is a virus scanner for servers. Problem A buffer overflow in the NTFSetPagerNotifyConfig function within the Notification.dll library allows remote attackers to execute arbitrary commands by sending a specially...

Trend Micro ServerProtect RPC NTF_SetPagerNotifyConfig buffer overflow

Added: 08/23/2007 CVE: CVE-2007-4218 BID: 25395 OSVDB: 39754 Background ServerProtect is a virus scanner for servers. Problem A buffer overflow in the NTFSetPagerNotifyConfig function within the Notification.dll library allows remote attackers to execute arbitrary commands by sending a specially...

Trend Micro ServerProtect Integer Overflow Vulnerability

Overview Trend Micro ServerProtect contains an integer overflow vulnerability that may allow a remote attacker to execute arbitrary code. Description Trend Micro ServerProtect is an anti-virus application designed to run on Microsoft Windows servers. The application provides administrators with...

Trend Micro ServerProtect RPC buffer overflows

Overview The Trend Micro ServerProtect fails to properly handle RPC requests. This vulnerability may allow a remote, unauthenticated attacker to execute arbitrary code. Description Trend Micro ServerProtect is an anti-virus application that is designed to run on Microsoft Windows servers. Trend...

CVE-2007-3873

Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap VST feature is enabled, allows local users to cause a denial of service service...

Integer overflow

Integer overflow in the RPCFNSYNCTASK function in StRpcSrv.dll, as used by the ServerProtect service SpntSvc.exe, in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a certain integer field in a request packet to TCP port 516...

CVE-2007-4490

Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to 1 RPCFNEVENTBACKDoHotFix or 2 CMDCHANGEAGENTREGISTERINFO...

Buffer overflow

Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to 1 RPCFNEVENTBACKDoHotFix or 2 CMDCHANGEAGENTREGISTERINFO...

Stack overflow

Stack-based buffer overflow in vstlib32.dll 1.2.0.1012 in the SSAPI Engine 5.0.0.1066 through 5.2.0.1012 in Trend Micro AntiSpyware 3.5 and PC-Cillin Internet Security 2007 15.0 through 15.3, when the Venus Spy Trap VST feature is enabled, allows local users to cause a denial of service service...

CVE-2007-4218

Multiple buffer overflows in the ServerProtect service SpntSvc.exe in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the 1 RPCFNENGNewManualScan, 2...

CVE-2007-4490

Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to 1 RPCFNEVENTBACKDoHotFix or 2 CMDCHANGEAGENTREGISTERINFO...

CVE-2007-4490

This CVE (CVE-2007-4490) affects Trend Micro ServerProtect 5.58 for Windows prior to Security Patch 4. The vulnerability involves multiple buffer overflows in EarthAgent.exe caused by certain RPC function calls (RPCFN_EVENTBACK_DoHotFix and CMD_CHANGE_AGENT_REGISTER_INFO). Exploitation could allo...

CVE-2007-3873

CVE-2007-3873 describes a stack-based buffer overflow in Trend Micro’s vstlib32.dll (1.2.0.1012) used by the SSAPI Engine in AntiSpyware 3.5 and PC-Cillin Internet Security 2007 (15.0–15.3), triggered when a long local file path is processed via a ReadDirectoryChangesW callback. Affects SSAPI Eng...

CVE-2007-4219

Integer overflow in the RPCFNSYNCTASK function in StRpcSrv.dll, as used by the ServerProtect service SpntSvc.exe, in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a certain integer field in a request packet to TCP port 516...

CVE-2007-4218

Trend Micro ServerProtect for Windows is affected by a buffer overflow in the SpntSvc RPC interface (port 5168) triggered via RPCFN_CMON_SetSvcImpersonateUser in Stcommon.dll, allowing remote code execution. Public sources detail this vulnerability as CVE-2007-4218 and identify the vulnerable com...

CVE-2007-4219

Trend Micro ServerProtect for Windows contains an integer overflow in RPCFN_SYNC_TASK (StRpcSrv.dll) used by the SpntSvc.exe service, exploitable by remote attackers via malformed requests to 5168/tcp. The flaw can trigger a heap-based buffer overflow and arbitrary code execution. Affected versio...

CVE-2007-4218: Improper Input Validation

Multiple buffer overflows in the ServerProtect service SpntSvc.exe in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the 1 RPCFNENGNewManualScan, 2...

CVE-2007-4219: Undefined Security Weakness

Integer overflow in the RPCFNSYNCTASK function in StRpcSrv.dll, as used by the ServerProtect service SpntSvc.exe, in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a certain integer field in a request packet to TCP port 516...

iDefense Security Advisory 08.21.07: Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities

Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities iDefense Security Advisory 08.21.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 21, 2007 I. BACKGROUND Trend Micro Inc.'s ServerProtect is an anti-virus software for Microsoft Windows and Novell NetWare servers. It...

iDefense Security Advisory 08.21.07: Trend Micro ServerProtect RPCFN_SYNC_TASK Integer Overflow Vulnerability

Trend Micro ServerProtect RPCFNSYNCTASK Integer Overflow Vulnerability iDefense Security Advisory 08.21.07 http://labs.idefense.com/intelligence/vulnerabilities/ Aug 21, 2007 I. BACKGROUND Trend Micro Inc.'s ServerProtect is an anti-virus software for Microsoft Windows and Novell NetWare servers...