CVEvulnerability
CVE-2007-1168
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-03-02
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
Affected configurations
• trend micro serverprotect 1.3
• trend micro serverprotect 1.25 2007-02-16
• trend micro serverprotect 2.5
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477 Vendor Advisory
- http://secunia.com/advisories/24264 Patch, Vendor Advisory
- http://securitytracker.com/id?1017685 Patch
- http://www.securityfocus.com/bid/22662 Patch
- http://www.trendmicro.com/download/product.asp?productid=20 Patch
- http://www.vupen.com/english/advisories/2007/0691 www.vupen.com
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477 Vendor Advisory
- http://secunia.com/advisories/24264 Patch, Vendor Advisory
- http://securitytracker.com/id?1017685 Patch
- http://www.securityfocus.com/bid/22662 Patch
- http://www.trendmicro.com/download/product.asp?productid=20 Patch
- http://www.vupen.com/english/advisories/2007/0691 www.vupen.com