CVE-2006-5269

Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, probably related to an RPC interface.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://blogs.iss.net/archive/trend.html
http://secunia.com/advisories/32618	Vendor Advisory
http://www.iss.net/threats/308.html
http://www.kb.cert.org/vuls/id/768681	US Government Resource
http://www.securityfocus.com/bid/32261
http://www.vupen.com/english/advisories/2008/3127
https://exchange.xforce.ibmcloud.com/vulnerabilities/31113

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:trend_micro:serverprotect:5.7:::::::*
	cpe:2.3:a:trend_micro:serverprotect:5.58:::::::*

History

No history.

Information

Published : 2008-11-17 23:30

Updated : 2017-07-20 01:33

NVD link : CVE-2006-5269

Mitre link : CVE-2006-5269

CVE.ORG link : CVE-2006-5269

JSON object : View

Products Affected

trend_micro

serverprotect

CWE

CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

{"id": "CVE-2006-5269", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2008-11-17T23:30:00.267", "references": [{"url": "http://blogs.iss.net/archive/trend.html", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/32618", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/threats/308.html", "source": "cve@mitre.org"}, {"url": "http://www.kb.cert.org/vuls/id/768681", "tags": ["US Government Resource"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/32261", "source": "cve@mitre.org"}, {"url": "http://www.vupen.com/english/advisories/2008/3127", "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31113", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-119"}]}], "descriptions": [{"lang": "en", "value": "Heap-based buffer overflow in an unspecified procedure in Trend Micro ServerProtect 5.7 and 5.58 allows remote attackers to execute arbitrary code via unknown vectors, probably related to an RPC interface."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en la memoria libre para la reserva din\u00e1mica (heap) en un procedimiento no especificado de Trend Micro ServerProtect 5.7 y 5.58 permite a atacantes remotos ejecutar c\u00f3digo arbitrario a trav\u00e9s de vectores desconocidos, probablemente relacionados con una interfaz RPC."}], "lastModified": "2017-07-20T01:33:39.087", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:trend_micro:serverprotect:5.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77A07A3A-25BF-4EBE-9B5C-46FBD0D2A3C4"}, {"criteria": "cpe:2.3:a:trend_micro:serverprotect:5.58:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BE7E0AA8-220E-4E20-9FF0-95C22664AFA9"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}