CVE-2017-9034: Input Validation
First published: Fri May 26 2017(Updated: )
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Trendmicro Serverprotect | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
- http://seclists.org/fulldisclosure/2017/May/91
- http://www.securitytracker.com/id/1038548
- https://success.trendmicro.com/solution/1117411
- https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities
- collector/nvd-index
- vendor/trendmicro
- canonical/trendmicro serverprotect
- version/trendmicro serverprotect/3.0