CVE-2007-2508

60Vexday Risk Score

Corrige pronto. Ella tiene exploit funcional público.

ssvc Attendepss 77%

de la publicación al arma0 días

Publicada en NVD8 may

1ª PoC7 may

metasploit7 may

probabilidad de explotación

77%top 1% de las CVE

explotación observada

noninguna fuente lo reporta

3 exploit(s) público(s)

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 3

exploitdbwww.exploit-db.com/exploits/16828no verificado exploitdbwww.exploit-db.com/exploits/16829no verificado exploitdbwww.exploit-db.com/exploits/29964no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://osvdb.org/35789 http://osvdb.org/35790 http://secunia.com/advisories/25186 http://securitytracker.com/id?1018010 https://exchange.xforce.ibmcloud.com/vulnerabilities/34162 https://exchange.xforce.ibmcloud.com/vulnerabilities/34163 http://www.kb.cert.org/vuls/id/488424 http://www.kb.cert.org/vuls/id/515616 http://www.securityfocus.com/archive/1/467932/100/0/threaded http://www.securityfocus.com/archive/1/467933/100/0/threaded http://www.securityfocus.com/bid/23866 http://www.securityfocus.com/bid/23868