CVE-2005-1928
First published: Wed Dec 14 2005(Updated: )
Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trend Micro ServerProtect for Windows | =5.58 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.idefense.com/application/poi/display?id=356&type=vulnerabilities
- http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254
- http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt
- http://www.securityfocus.com/bid/15868
- http://securitytracker.com/id?1015358
- http://secunia.com/advisories/18038
- http://www.osvdb.org/21773
- http://securityreason.com/securityalert/259
- http://www.vupen.com/english/advisories/2005/2907
Frequently Asked Questions
What is the severity of CVE-2005-1928?
CVE-2005-1928 is classified as a denial of service vulnerability that can significantly impact system performance.
How do I fix CVE-2005-1928?
To mitigate CVE-2005-1928, update to a patched version of Trend Micro ServerProtect EarthAgent and ensure proper network filtering.
Which versions are affected by CVE-2005-1928?
CVE-2005-1928 affects Trend Micro ServerProtect EarthAgent for Windows versions 5.58 and possibly earlier.
Can CVE-2005-1928 be exploited remotely?
Yes, CVE-2005-1928 can be exploited remotely via a flood of crafted packets.
What is a potential impact of CVE-2005-1928?
The exploitation of CVE-2005-1928 may lead to high CPU consumption and service disruption.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/last-modified-date
- agent/severity
- agent/author
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- vendor/trend micro
- product/serverprotect earthagent
- canonical/trend micro serverprotect earthagent
- agent/software-canonical-lookup-request
- collector/nvd-index
- canonical/trend micro serverprotect for windows
- version/trend micro serverprotect for windows/5.58