Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Serverprotect | Trend_micro | 1.3 (including) | 1.3 (including) |
| Serverprotect | Trend_micro | 1.25_2007-02-16 (including) | 1.25_2007-02-16 (including) |
| Serverprotect | Trend_micro | 2.5 (including) | 2.5 (including) |
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
- http://secunia.com/advisories/24264
- http://securitytracker.com/id?1017685
- http://www.securityfocus.com/bid/22662
- http://www.trendmicro.com/download/product.asp?productid=20
- http://www.vupen.com/english/advisories/2007/0691
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
- http://secunia.com/advisories/24264
- http://securitytracker.com/id?1017685
- http://www.securityfocus.com/bid/22662
- http://www.trendmicro.com/download/product.asp?productid=20
- http://www.vupen.com/english/advisories/2007/0691