CVE-2017-9034: Input Validation

Published May 25, 2017

Updated

Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates.

Affected Software

1 affected component

trendmicro Serverprotect Linux=3.0

Remediation

Patch Available

https://success.trendmicro.com/solution/1117411

Event History

May 25, 2017

CVE Published

via MITRE·07:00 PM

Data Sourced

via MITRE·07:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2017-9034?

CVE-2017-9034 has a high severity rating due to its potential to allow attackers to execute arbitrary code with root privileges.

How do I fix CVE-2017-9034?

To fix CVE-2017-9034, ensure that you update Trend Micro ServerProtect for Linux to the latest patch version available.

What systems are affected by CVE-2017-9034?

CVE-2017-9034 affects Trend Micro ServerProtect for Linux version 3.0 prior to CP 1531.

What can attackers do with CVE-2017-9034?

Attackers can exploit CVE-2017-9034 to write to arbitrary files and execute arbitrary code with root access on the system.

Is CVE-2017-9034 a local or remote vulnerability?

CVE-2017-9034 can be exploited remotely, allowing attackers to target systems without physical access.