ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability

ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-024.html May 7, 2007 -- CVE ID: CVE-2007-2508 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...

ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability

ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-07-025.html May 7, 2007 -- CVE ID: CVE-2007-2508 -- Affected Vendor: Trend Micro -- Affected Products: ServerProtect v5.58 -- TippingPointTM IPS Customer Protection:...

CVE-2007-2533

Trend Micro ServerProtect 5.58 is affected by multiple buffer overflows exploitable via a crafted RPC message processed by (1) RPCFN_ActiveRollback in stcommon.dll, (2) ENG_SetRealTimeScanConfigInfo, or (3) ENG_SendEmail in eng50.dll. The vulnerabilities allow remote code execution with network a...

Buffer overflow

Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...

Stack overflow

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

Immunity Canvas: TM_SPROTECTAGENT

Name| tmsprotectagent ---|--- CVE| CVE-2007-2508 Exploit Pack| CANVAS Description| Trend Micro ServerProtect Agent RPC Overflow Notes| CVE Name: CVE-2007-2508 VENDOR: Trend Micro Notes: Platforms Tested: References: http://www.tippingpoint.com/security/advisories/TSRT-07-025.html CVE Url:...

CVE-2007-2508

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

CVE-2007-2528

Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...

CVE-2007-2528

Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...

CVE-2007-2508

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

CVE-2007-2508

CVE-2007-2508 describes two remote, stack-based buffer overflow flaws in Trend Micro ServerProtect 5.58 that can be triggered via RPC on TCP ports 5168 (AgRpcClient::CreateBinding in SpntSvc.exe) and 3628 (EarthAgent.exe, reachable via TmRpcSrv.dll). Exploitation could allow arbitrary code execut...

CVE-2007-2528

Summary: CVE-2007-2528 concerns a buffer overflow in Trend Micro ServerProtect 5.58 for Windows prior to Security Patch 3 Build 1176, via RPC-related vectors in AgRpcCln.dll. Connected documents provide concrete details for related vulnerability CVE-2007-2508, including multiple stack-based overf...

CVE-2007-2508: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to 1 TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in...

CVE-2007-2528: Undefined Security Weakness

Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests. NOTE: this is probably a different vulnerability than CVE-2007-2508...

Trend Micro ServerProtect EarthAgent buffer overflow vulnerability

Overview Trend Micro ServerProtect contains a buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code on a vulnerable system. Description Trend Micro ServerProtect is an anti-virus application that is designed to run on Windows-based servers. The...

Trend Micro ServerProtect 5.58 EarthAgent.EXE Buffer Overflow

This module exploits a buffer overflow in Trend Micro ServerProtect 5.58 Build 1060 EarthAgent.EXE. By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use exploit/windows/antivirus/trendmicro/serverprotectearthagent msf...

Trend Micro ServerProtect 5.58 - SpntSvc.exe Remote Stack Buffer Overflow

Trend Micro ServerProtect 5.58 - SpntSvc.exe Remote Stack Buffer Overflow source: https://www.securityfocus.com/bid/23868/info Trend Micro ServerProtect is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copyin...

Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability

This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Trend Micro ServerProtect. Authentication is not required to exploit this vulnerability. The specific flaw exists in the SpntSvc.exe daemon, bound by default on TCP port 5168 and exposing the following...

Trend Micro ServerProtect 5.58 CreateBinding() Buffer Overflow

This module exploits a buffer overflow in Trend Micro ServerProtect 5.58 Build 1060. By sending a specially crafted RPC request, an attacker could overflow the buffer and execute arbitrary code. Module Options msf use exploit/windows/antivirus/trendmicro/serverprotectcreatebinding msf...

Trend Micro ServerProtect 5.58 - 'SpntSvc.exe' Remote Stack Buffer Overflow

source: https://www.securityfocus.com/bid/23868/info Trend Micro ServerProtect is prone to a stack-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer. Exploiting this issue allow...