NVD

Id
54675  
Name
CVE-2007-2508  
Description
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-05-08  
Modified Date
2011-09-06  
Seq
2007-2508  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
277519 54675 CVE-2007-2508 1018010  View
277520 54675 CVE-2007-2508 VU#488424  View
277521 54675 CVE-2007-2508 VU#515616  View
277522 54675 CVE-2007-2508 20070507 ZDI-07-024: Trend Micro ServerProtect EarthAgent Stack Overflow Vulnerability  View
277523 54675 CVE-2007-2508 20070507 ZDI-07-025: Trend Micro ServerProtect AgRpcCln.dll Stack Overflow Vulnerability  View
277524 54675 CVE-2007-2508 23866  View
277525 54675 CVE-2007-2508 23868  View
277526 54675 CVE-2007-2508 http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt  View
277527 54675 CVE-2007-2508 ADV-2007-1689  View
277528 54675 CVE-2007-2508 http://www.zerodayinitiative.com/advisories/ZDI-07-024.html  View
277529 54675 CVE-2007-2508 http://www.zerodayinitiative.com/advisories/ZDI-07-025.html  View
277530 54675 CVE-2007-2508 serverprotect-agrpccln-bo(34162)  View
277531 54675 CVE-2007-2508 serverprotect-earthagent-bo(34163)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
56824 JVNDB-2007-005516 Trend Micro ServerProtect におけるスタックベースのバッファオーバーフローの脆弱性 Trend Micro ServerProtect には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-2508 25863 CVE-2007-2508 54675 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005516.html 2007-04-03 2012-12-20 View