Unscored CVE-2007-1168 EUVD-2007-1165GHSA-34jj-j7vv-x8fp

Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and rec…

Published Feb 28, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).

References

http://www.trendmicro.com/download/product.asp?productid=20
ADV-2007-0691 vdb-entry
22662 vdb-entry
1017685 vdb-entry
24264 third-party-advisory
20070221 Trend Micro ServerProtect Web Interface Authorization Bypass Vulnerability third-party-advisory