CVE-2017-9036: High severity trendmicro Serverprotect Linux vulnerability
Published May 25, 2017
·Updated
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory.
Affected Software
1 affected component
trendmicro Serverprotect Linux=3.0
Remediation
Patch Available
Event History
May 25, 2017
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-9036?
The severity of CVE-2017-9036 is rated as high with a score of 7.8.
2
How do I fix CVE-2017-9036?
To fix CVE-2017-9036, ensure you upgrade Trend Micro ServerProtect for Linux to version 3.0 CP 1531 or later.
3
What type of vulnerability is CVE-2017-9036?
CVE-2017-9036 is a privilege escalation vulnerability due to an unrestricted quarantine directory.
4
Who is affected by CVE-2017-9036?
Local users of Trend Micro ServerProtect for Linux version 3.0 prior to CP 1531 are affected by CVE-2017-9036.
5
What can attackers do with CVE-2017-9036?
Attackers can gain elevated privileges by exploiting the unrestricted quarantine directory in CVE-2017-9036.