CVEvulnerability

CVE-2005-1930

5.0 MEDIUM Published 2005-12-14 Modified 2026-06-16 Official page ↗

Status: Modified
Published: 2005-12-14
Last modified: 2026-06-16
Assigner: [email protected]
CVSS 2.0 ([email protected]): 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE parameter.

Affected configurations

• trend micro serverprotect 5.58

References

http://secunia.com/advisories/18038 secunia.com
http://securityreason.com/securityalert/258 securityreason.com
http://securitytracker.com/id?1015358 securitytracker.com
http://www.idefense.com/application/poi/display?id=352&type=vulnerabilities Vendor Advisory
http://www.osvdb.org/21770 www.osvdb.org
http://www.securityfocus.com/bid/15867 www.securityfocus.com
http://www.vupen.com/english/advisories/2005/2907 www.vupen.com
http://secunia.com/advisories/18038 secunia.com
http://securityreason.com/securityalert/258 securityreason.com
http://securitytracker.com/id?1015358 securitytracker.com
http://www.idefense.com/application/poi/display?id=352&type=vulnerabilities Vendor Advisory
http://www.osvdb.org/21770 www.osvdb.org
http://www.securityfocus.com/bid/15867 www.securityfocus.com
http://www.vupen.com/english/advisories/2005/2907 www.vupen.com