CVE-2006-5269

Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, probably related to an RPC interface.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/32261
http://secunia.com/advisories/32618	Vendor Advisory
http://www.iss.net/threats/308.html
http://blogs.iss.net/archive/trend.html
http://www.vupen.com/english/advisories/2008/3127
http://www.kb.cert.org/vuls/id/768681	US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/31113

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:trend_micro:serverprotect:5.7:::::::*
	cpe:2.3:a:trend_micro:serverprotect:5.58:::::::*

Information

Published : 2008-11-17 15:30

Updated : 2017-07-19 18:33

NVD link : CVE-2006-5269

Mitre link : CVE-2006-5269

JSON object : View

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

Advertisement

Products Affected

trend_micro

serverprotect

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/32261", "name": "32261", "tags": [], "refsource": "BID"}, {"url": "http://secunia.com/advisories/32618", "name": "32618", "tags": ["Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.iss.net/threats/308.html", "name": "20081111 Trend Micro ServerProtect [PROCEDURE NAME REDACTED] Heap Overflow", "tags": [], "refsource": "ISS"}, {"url": "http://blogs.iss.net/archive/trend.html", "name": "http://blogs.iss.net/archive/trend.html", "tags": [], "refsource": "MISC"}, {"url": "http://www.vupen.com/english/advisories/2008/3127", "name": "ADV-2008-3127", "tags": [], "refsource": "VUPEN"}, {"url": "http://www.kb.cert.org/vuls/id/768681", "name": "VU#768681", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31113", "name": "application-rpc-interface-bo(31113)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, probably related to an RPC interface."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-119"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2006-5269", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2008-11-17T23:30Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-20T01:33Z"}