CVE-2007-1168: High severity Trend Micro ServerProtect vulnerability
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx2376info cookie to the web interface port (14942/tcp).
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1168?
CVE-2007-1168 is considered a high severity vulnerability due to its potential for remote exploitation and unauthorized configuration changes.
How do I fix CVE-2007-1168?
To mitigate CVE-2007-1168, it is recommended to upgrade to a fixed version of Trend Micro ServerProtect for Linux after the problematic versions 1.25, 1.3, and 2.5.
What systems are affected by CVE-2007-1168?
CVE-2007-1168 affects Trend Micro ServerProtect for Linux versions 1.25, 1.3, and 2.5 prior to the update on February 16, 2007.
Can CVE-2007-1168 be exploited remotely?
Yes, CVE-2007-1168 can be exploited remotely through HTTP requests to the web interface, making it particularly dangerous.
What are the potential consequences of CVE-2007-1168?
Exploitation of CVE-2007-1168 may allow attackers to access arbitrary web pages and reconfigure the security product, compromising system integrity.