Priority HIGH 82
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflo…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.77194 · Published 2007-05-08 · No fix listed CWE-119
Priority HIGH 81
Multiple stack-based buffer overflows in Trend Micro ServerProtect for Windows and EMC 5.58, and for Network Appliance Filer 5.61 and 5.62, allow remote attackers to execute arbitrary code via crafted RPC requests to TmR…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.7298 · Published 2007-02-21 · No fix listed
Priority HIGH 69
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.36648 · Published 2007-12-20 · No fix listed CWE-264
Priority MEDIUM 57
Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to cert…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.13021 · Published 2007-08-22 · No fix listed CWE-119
Priority MEDIUM 56
Integer overflow in the RPCFN_SYNC_TASK function in StRpcSrv.dll, as used by the ServerProtect service (SpntSvc.exe), in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allows remote attackers to execu…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.10469 · Published 2007-08-22 · No fix listed CWE-189
Priority MEDIUM 55
Stack-based buffer overflow in the TMregChange function in TMReg.dll in Trend Micro ServerProtect before 5.58 Security Patch 4 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 5005.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.09561 · Published 2007-09-12 · No fix listed CWE-119
Priority MEDIUM 54
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a folder read operation over RPC…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08606 · Published 2008-11-17 · No fix listed CWE-119
Priority MEDIUM 54
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a file read operation over RPC.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08606 · Published 2008-11-17 · No fix listed CWE-119
Priority MEDIUM 54
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to a read operation over RPC.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08606 · Published 2008-11-17 · No fix listed CWE-119
Priority MEDIUM 54
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, probably related to an RPC interface.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.08606 · Published 2008-11-17 · No fix listed CWE-119
Priority MEDIUM 53
Unspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via vectors related to obtaining "administrative access to the RPC interface."
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.07209 · Published 2008-11-17 · No fix listed CWE-287
Priority MEDIUM 52
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a d…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06696 · Published 2008-11-17 · No fix listed CWE-119
Priority MEDIUM 52
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a d…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06696 · Published 2008-11-17 · No fix listed CWE-119
Priority MEDIUM 52
Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, possibly related to the product's configuration, a d…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.06696 · Published 2008-11-17 · No fix listed CWE-119
Priority MEDIUM 51
Multiple buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2- Build 1174 allow remote attackers to execute arbitrary code via a crafted RPC message processed by the (1) the RPCFN_ActiveRollback fun…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05359 · Published 2007-05-09 · No fix listed
Priority MEDIUM 51
Buffer overflow in the Trend Micro Scan Engine 8.000 and 8.300 before virus pattern file 4.245.00, as used in other products such as Cyber Clean Center (CCC) Cleaner, allows remote attackers to execute arbitrary code via…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.08576 · Published 2007-02-08 · No fix listed
Priority MEDIUM 49
Buffer overflow in AgRpcCln.dll for Trend Micro ServerProtect 5.58 for Windows before Security Patch 3 Build 1176 allows remote attackers to execute arbitrary code via unknown vectors related to RPC requests.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03731 · Published 2007-05-08 · No fix listed
Priority MEDIUM 48
Multiple buffer overflows in EarthAgent.exe in Trend Micro ServerProtect 5.58 for Windows before Security Patch 4 allow remote attackers to have an unknown impact via certain RPC function calls to (1) RPCFN_EVENTBACK_DoH…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.02514 · Published 2007-08-22 · No fix listed
Priority MEDIUM 41
Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allo…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04944 · Published 2005-12-14 · No fix listed CWE-119
Priority MEDIUM 40
Heap-based buffer overflow in Trend Micro AntiVirus Library VSAPI before 7.510, as used in multiple Trend Micro products, allows remote attackers to execute arbitrary code via a crafted ARJ file with long header file nam…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04409 · Published 2005-02-24 · No fix listed
Priority LOW 39
The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to caus…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02673 · Published 2006-12-11 · No fix listed
Priority LOW 38
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02522 · Published 2007-02-28 · No fix listed
Priority LOW 27
Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have a default configuration setting of "Do not scan compressed files when Extracted file count exceeds 50…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.01919 · Published 2006-02-10 · No fix listed
Priority LOW 27
Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly e…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01916 · Published 2005-12-14 · No fix listed
Priority LOW 26
The web interface in Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 accepts logon requests through unencrypted HTTP, which might allow remote attackers to obtain credentials by sniffing the…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01654 · Published 2007-02-28 · No fix listed