CVE-2006-5268

Unspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via vectors related to obtaining "administrative access to the RPC interface."

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://secunia.com/advisories/32618	Vendor Advisory
http://www.securityfocus.com/bid/32261
http://blogs.iss.net/archive/trend.html
http://www.iss.net/threats/307.html
http://www.vupen.com/english/advisories/2008/3127
http://www.kb.cert.org/vuls/id/768681	US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/31112

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:trend_micro:serverprotect:5.7:::::::*
	cpe:2.3:a:trend_micro:serverprotect:5.58:::::::*

Information

Published : 2008-11-17 15:30

Updated : 2017-07-19 18:33

NVD link : CVE-2006-5268

Mitre link : CVE-2006-5268

JSON object : View

CWE

NVD-CWE-noinfo CWE-287

Improper Authentication

Advertisement

Products Affected

trend_micro

serverprotect

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://secunia.com/advisories/32618", "name": "32618", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.securityfocus.com/bid/32261", "name": "32261", "tags": [], "refsource": "BID"}, {"url": "http://blogs.iss.net/archive/trend.html", "name": "http://blogs.iss.net/archive/trend.html", "tags": [], "refsource": "MISC"}, {"url": "http://www.iss.net/threats/307.html", "name": "20081111 Trend Micro ServerProtect Unauthenticated Remote Administration", "tags": [], "refsource": "ISS"}, {"url": "http://www.vupen.com/english/advisories/2008/3127", "name": "ADV-2008-3127", "tags": [], "refsource": "VUPEN"}, {"url": "http://www.kb.cert.org/vuls/id/768681", "name": "VU#768681", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31112", "name": "application-unauth-admin-access(31112)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Unspecified vulnerability in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via vectors related to obtaining \"administrative access to the RPC interface.\""}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-287"}, {"lang": "en", "value": "NVD-CWE-noinfo"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-5268", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2008-11-17T23:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-20T01:33Z"}