Trend Micro ServerProtect multiple security vulnerabilities

SpntSvc.exe TCP/5168 buffer overflow. Buffer overflow in EarthAgent.exe TCP/3628...

CVE-2007-2533: Undefined Security Weakness

Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the 1 the RPCFNActiveRollback function in a stcommon.dll, or the 2 ENGSetRealTimeScanConfigInfo or 3 ENGSendEmail...

CVE-2007-2533

Trend Micro ServerProtect 5.58 is affected by multiple buffer overflows exploitable via a crafted RPC message processed by (1) RPCFN_ActiveRollback in stcommon.dll, (2) ENG_SetRealTimeScanConfigInfo, or (3) ENG_SendEmail in eng50.dll. The vulnerabilities allow remote code execution with network a...

CVE-2007-2533

Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the 1 the RPCFNActiveRollback function in a stcommon.dll, or the 2 ENGSetRealTimeScanConfigInfo or 3 ENGSendEmail...

ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability

ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-025.html May 7, 2007 -- CVE ID: CVE-2007-2508 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...

Trend Micro ServerProtect AgRpcCln.dll Buffer Overflow

The remote version of Trend Micro ServerProtect is vulnerable to a stack overflow involving the 'wcscpy' function of the routine 'CAgRpcClient::CreateBinding' in AgRpcCln.dll library. An unauthenticated, remote attacker may be able to leverage this issue with specially crafted RPC requests to its...

Trend Micro ServerProtect EarthAgent RPC Request Remote Buffer Overflow

The remote version of Trend Micro ServerProtect is vulnerable to a stack overflow involving its EarthAgent service. An unauthenticated, remote attacker may be able to leverage this issue with specially- crafted RPC requests to execute arbitrary code on the remote host. Note that by default, Trend...

Trend Micro ServerProtect SpntSvc buffer overflow vulnerability

Overview Trend Micro ServerProtect contains a buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code on a vulnerable system. Description Trend Micro ServerProtect is an anti-virus application that is designed to run on Windows-based servers. The...

Stack overflow

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

CVE-2007-2508

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

CVE-2007-2508

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

Immunity Canvas: TM_SPROTECTAGENT

Name| tmsprotectagent ---|--- CVE| CVE-2007-2508 Exploit Pack| CANVAS Description| Trend Micro ServerProtect Agent RPC Overflow Notes| CVE Name: CVE-2007-2508 VENDOR: Trend Micro Notes: Platforms Tested: References: http://www.tippingpoint.com/security/advisories/TSRT-07-025.html CVE Url:...

Buffer overflow

Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...

CVE-2007-2528

Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...

CVE-2007-2508

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

CVE-2007-2528

Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...

CVE-2007-2508

CVE-2007-2508 describes two remote, stack-based buffer overflow flaws in Trend Micro ServerProtect 5.58 that can be triggered via RPC on TCP ports 5168 (AgRpcClient::CreateBinding in SpntSvc.exe) and 3628 (EarthAgent.exe, reachable via TmRpcSrv.dll). Exploitation could allow arbitrary code execut...

CVE-2007-2528

Summary: CVE-2007-2528 concerns a buffer overflow in Trend Micro ServerProtect 5.58 for Windows prior to Security Patch 3 Build 1176, via RPC-related vectors in AgRpcCln.dll. Connected documents provide concrete details for related vulnerability CVE-2007-2508, including multiple stack-based overf...

CVE-2007-2508: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

CVE-2007-2528: Undefined Security Weakness

Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...