CVE-2007-1168 Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_inf...
HighCVSS 7.5
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trend micro serverprotect | = 1.3 | No fix listed |
| trend micro serverprotect | = 1.25_2007-02-16 | No fix listed |
| trend micro serverprotect | = 2.5 | No fix listed |
References
- 20070221 Trend Micro ServerProtect Web Interface Authorization Bypass Vulnerability third-party-advisory vendor-advisory
- 24264 patch third-party-advisory vendor-advisory
- 1017685 patch vdb-entry
- 22662 patch vdb-entry
- www.trendmicro.com patch
- ADV-2007-0691 vdb-entry