CVSS: 7.8EPSS: 1%CPEs: 3EXPL: 0CVE-2006-6458
https://notcve.org/view.php?id=CVE-2006-6458
The Trend Micro scan engine before 8.320 for Windows and before 8.150 on HP-UX and AIX, as used in Trend Micro PC Cillin - Internet Security 2006, Office Scan 7.3, and Server Protect 5.58, allows remote attackers to cause a denial of service (CPU consumption and system hang) via a malformed RAR archive with an Archive Header section with the head_size and pack_size fields set to zero, which triggers an infinite loop. El motor de escaneo de Trend Micro anterior a 8.320 para Windows y anterior a 8.150 en HP-UX y AIX, utilizado en Trend Micro PC Cillin - internet Security 2006, Office Scan 7.3, y Server Protect 5.58, permite a atacantes remotos provocar una denegación de servicio (agotamiento de CPU y cuelgue de aplicación) mediante un archivo RAR mal formado con una sección Cabecera de Archivo con lo campos head_size (tamaño de cabecera) y pack_size (tamaño de paquete) puestos a cero, lo cual dispara un bucle infinito. • http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=439 http://secunia.com/advisories/23321 http://www.securityfocus.com/bid/21509 http://www.vupen.com/english/advisories/2006/4918 •
CVSS: 5.1EPSS: 0%CPEs: 3EXPL: 0CVE-2006-0642
https://notcve.org/view.php?id=CVE-2006-0642
Trend Micro ServerProtect 5.58, and possibly InterScan Messaging Security Suite and InterScan Web Security Suite, have a default configuration setting of "Do not scan compressed files when Extracted file count exceeds 500 files," which may be too low in certain circumstances, which allows remote attackers to bypass anti-virus checks by sending compressed archives containing many small files. NOTE: since this is related to a configuration setting that has an operational impact that might vary depending on the environment, and the product is claimed to report a message when the compressed file exceeds specified limits, perhaps this should not be included in CVE. • http://www.packetstormsecurity.org/0602-advisories/Bypass.pdf http://www.packetstormsecurity.org/filedesc/Bypass.pdf.html http://www.securityfocus.com/archive/1/423896/100/0/threaded http://www.securityfocus.com/archive/1/423913/100/0/threaded http://www.securityfocus.com/archive/1/423914/100/0/threaded http://www.securityfocus.com/archive/1/424172/100/0/threaded http://www.securityfocus.com/archive/1/424598/100/0/threaded http://www.securityfocus.com/bid/16483 https://exchange •
CVSS: 7.8EPSS: 1%CPEs: 1EXPL: 0CVE-2005-1928
https://notcve.org/view.php?id=CVE-2005-1928
Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak. • http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254 http://secunia.com/advisories/18038 http://securityreason.com/securityalert/259 http://securitytracker.com/id?1015358 http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt http://www.idefense.com/application/poi/display?id=356&type=vulnerabilities http://www.osvdb.org/21773 http://www.securityfocus.com/bid/15868 http://www.vupen.com/english/advisories/2005/2907 • CWE-399: Resource Management Errors •
CVSS: 7.5EPSS: 64%CPEs: 1EXPL: 0CVE-2005-1929
https://notcve.org/view.php?id=CVE-2005-1929
Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via "wrapped" length values in Chunked transfer requests. NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load. As such, this might not be a vulnerability in Trend Micro's product. • http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039972.html http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039978.html http://secunia.com/advisories/18038 http://securityreason.com/securityalert/256 http://securityreason.com/securityalert/257 http://securitytracker.com/id?1015358 http://www.idefense.com/application/poi/display?id=353&type=vulnerabilities http://www.osvdb.org/21771 http://www.osvdb.org/21772 http://www.securityfocus.com/bid/15865 http: • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 5.0EPSS: 1%CPEs: 1EXPL: 0CVE-2005-1930
https://notcve.org/view.php?id=CVE-2005-1930
Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE parameter. Vulnerabilidad de atravesamiento de directorios en componente Crystal Report (rptserver.asp) en Tren Micro Server Protect Managemente Console 5.58, usada en Control Manager 2.5 y 3.0 y Damage Cleanup Server 1.1, y posiblemente versiones anteriores, permite a atacantes remotos leer ficheros de su elección mediante el parámetro IMAGE. • http://secunia.com/advisories/18038 http://securityreason.com/securityalert/258 http://securitytracker.com/id?1015358 http://www.idefense.com/application/poi/display?id=352&type=vulnerabilities http://www.osvdb.org/21770 http://www.securityfocus.com/bid/15867 http://www.vupen.com/english/advisories/2005/2907 •