CVE-2017-9034 Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate softw...
CriticalCVSS 9.8
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| trendmicro serverprotect | = 3.0 | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20170523 [CORE-2017-0002] - Trend Micro ServerProtect Multiple Vulnerabilities exploit mailing-list third-party-advisory
- 1038548 third-party-advisory vdb-entry
- success.trendmicro.com patch vendor-advisory
- www.coresecurity.com exploit technical-description third-party-advisory