← back
CVE-2007-2508

CVE-2007-2508

EPSS 77.2%
Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.
Affected products
n/a · n/a
public PoCs found — 3
exploitdbwww.exploit-db.com/exploits/16828unverifiedexploitdbwww.exploit-db.com/exploits/16829unverifiedexploitdbwww.exploit-db.com/exploits/29964unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://osvdb.org/35789http://osvdb.org/35790http://secunia.com/advisories/25186http://securitytracker.com/id?1018010https://exchange.xforce.ibmcloud.com/vulnerabilities/34162https://exchange.xforce.ibmcloud.com/vulnerabilities/34163http://www.kb.cert.org/vuls/id/488424http://www.kb.cert.org/vuls/id/515616http://www.securityfocus.com/archive/1/467932/100/0/threadedhttp://www.securityfocus.com/archive/1/467933/100/0/threadedhttp://www.securityfocus.com/bid/23866http://www.securityfocus.com/bid/23868