NVD

Id
67645  
Name
CVE-2005-1929  
Description
Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunked transfer requests. NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load. As such, this might not be a vulnerability in Trend Micro"s product.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2005-12-14  
Modified Date
2011-03-07  
Seq
2005-1929  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
350107 67645 CVE-2005-1929 20051214 Re: iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability  View
350108 67645 CVE-2005-1929 20051214 Re: iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability  View
350109 67645 CVE-2005-1929 256  View
350110 67645 CVE-2005-1929 257  View
350111 67645 CVE-2005-1929 1015358  View
350112 67645 CVE-2005-1929 20051214 Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow  View
350113 67645 CVE-2005-1929 15865  View
350114 67645 CVE-2005-1929 15866  View
350115 67645 CVE-2005-1929 ADV-2005-2907  View

Related JVN