7.5

CVE-2007-1168

Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trend Micro ≫ Serverprotect Version1.3 Editionlinux
Trend Micro ≫ Serverprotect Version1.25_2007-02-16 Editionlinux
Trend Micro ≫ Serverprotect Version2.5 Editionlinux
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.44% 0.822
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
Vendor Advisory
http://secunia.com/advisories/24264
Patch
Vendor Advisory
http://securitytracker.com/id?1017685
Patch
http://www.securityfocus.com/bid/22662
Patch
http://www.trendmicro.com/download/product.asp?productid=20
Patch
http://www.vupen.com/english/advisories/2007/0691