NVD

Id
56347  
Name
CVE-2007-4218  
Description
Multiple buffer overflows in the ServerProtect service (SpntSvc.exe) in Trend Micro ServerProtect for Windows before 5.58 Security Patch 4 allow remote attackers to execute arbitrary code via certain RPC requests to certain TCP ports that are processed by the (1) RPCFN_ENG_NewManualScan, (2) RPCFN_ENG_TimedNewManualScan, and (3) RPCFN_SetComputerName functions in (a) StRpcSrv.dll; the (4) RPCFN_CMON_SetSvcImpersonateUser and (5) RPCFN_OldCMON_SetSvcImpersonateUser functions in (b) Stcommon.dll; the (6) RPCFN_ENG_TakeActionOnAFile and (7) RPCFN_ENG_AddTaskExportLogItem functions in (c) Eng50.dll; the (8) NTF_SetPagerNotifyConfig function in (d) Notification.dll; or the (9) RPCFN_CopyAUSrc function in the (e) ServerProtect Agent service.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-08-22  
Modified Date
2011-09-13  
Seq
2007-4218  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
286953 56347 CVE-2007-4218 20070821 Trend Micro ServerProtect Multiple Buffer Overflow Vulnerabilities  View
286954 56347 CVE-2007-4218 3052  View
286955 56347 CVE-2007-4218 1018594  View
286956 56347 CVE-2007-4218 VU#109056  View
286957 56347 CVE-2007-4218 VU#204448  View
286958 56347 CVE-2007-4218 20070907 ZDI-07-050: Trend Micro ServerProtect RPCFN_SetComputerName() Stack Overflow Vulnerability  View
286959 56347 CVE-2007-4218 25395  View
286960 56347 CVE-2007-4218 http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch4_readme.txt  View
286961 56347 CVE-2007-4218 TA07-235A  View
286962 56347 CVE-2007-4218 ADV-2007-2934  View
286963 56347 CVE-2007-4218 http://www.zerodayinitiative.com/advisories/ZDI-07-050.html  View
286964 56347 CVE-2007-4218 serverprotect-strpcsrv-bo(36172)  View
286965 56347 CVE-2007-4218 serverprotect-stcommondll-bo(36174)  View
286966 56347 CVE-2007-4218 serverprotect-eng50dll-bo(36175)  View
286967 56347 CVE-2007-4218 serverprotect-notification-bo(36176)  View
286968 56347 CVE-2007-4218 serverprotect-agent-rpcfncopyausrc-bo(36178)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
51959 JVNDB-2007-000622 Trend Micro ServerProtect の TCP ポート処理の不備による複数のバッファオーバーフローの脆弱性 Trend Micro ServerProtect には RPC リクエストの TCP ポート処理に不備が存在するために複数のバッファオーバーフローが発生する脆弱性が存在します。 CVE-2007-4218 27573 CVE-2007-4218 56347 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000622.html 2007-08-21 2007-08-30 View