CVE

Id
25865  
CVE No.
CVE-2007-2508  
Status
Candidate  
Description
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.  
Phase
Assigned (20070507)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
259612 25865 CVE-2007-2508 BUGTRAQ:20070507 ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability  View
259613 25865 CVE-2007-2508 URL:http://www.securityfocus.com/archive/1/archive/1/467932/100/0/threaded  View
259614 25865 CVE-2007-2508 BUGTRAQ:20070507 ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability  View
259615 25865 CVE-2007-2508 URL:http://www.securityfocus.com/archive/1/archive/1/467933/100/0/threaded  View
259616 25865 CVE-2007-2508 MISC:http://www.zerodayinitiative.com/advisories/ZDI-07-024.html  View
259617 25865 CVE-2007-2508 MISC:http://www.zerodayinitiative.com/advisories/ZDI-07-025.html  View
259618 25865 CVE-2007-2508 CONFIRM:http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt  View
259619 25865 CVE-2007-2508 CERT-VN:VU#515616  View
259620 25865 CVE-2007-2508 URL:http://www.kb.cert.org/vuls/id/515616  View
259621 25865 CVE-2007-2508 CERT-VN:VU#488424  View
259622 25865 CVE-2007-2508 URL:http://www.kb.cert.org/vuls/id/488424  View
259623 25865 CVE-2007-2508 BID:23866  View
259624 25865 CVE-2007-2508 URL:http://www.securityfocus.com/bid/23866  View
259625 25865 CVE-2007-2508 BID:23868  View
259626 25865 CVE-2007-2508 URL:http://www.securityfocus.com/bid/23868  View
259627 25865 CVE-2007-2508 VUPEN:ADV-2007-1689  View
259628 25865 CVE-2007-2508 URL:http://www.vupen.com/english/advisories/2007/1689  View
259629 25865 CVE-2007-2508 OSVDB:35789  View
259630 25865 CVE-2007-2508 URL:http://osvdb.org/35789  View
259631 25865 CVE-2007-2508 OSVDB:35790  View
259632 25865 CVE-2007-2508 URL:http://osvdb.org/35790  View
259633 25865 CVE-2007-2508 SECTRACK:1018010  View
259634 25865 CVE-2007-2508 URL:http://securitytracker.com/id?1018010  View
259635 25865 CVE-2007-2508 SECUNIA:25186  View
259636 25865 CVE-2007-2508 URL:http://secunia.com/advisories/25186  View
259637 25865 CVE-2007-2508 XF:serverprotect-agrpccln-bo(34162)  View
259638 25865 CVE-2007-2508 URL:http://xforce.iss.net/xforce/xfdb/34162  View
259639 25865 CVE-2007-2508 XF:serverprotect-earthagent-bo(34163)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
51701 JVNDB-2007-000364 PHP の make_http_soap_request() 関数におけるバッファオーバーフローの脆弱性 PHP の make_http_soap_request() 関数には、バッファオーバーフローの脆弱性が存在します。本脆弱性の詳細は不明ですが、”/” (スラッシュ) 文字列に関連があります。 CVE-2007-2510 25865 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000364.html  View