CVE-2007-1168

Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).

🔗 References (12)

• cve@mitrehttp://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
• cve@mitrehttp://secunia.com/advisories/24264
• cve@mitrehttp://securitytracker.com/id?1017685
• cve@mitrehttp://www.securityfocus.com/bid/22662
• cve@mitrehttp://www.trendmicro.com/download/product.asp?productid=20
• cve@mitrehttp://www.vupen.com/english/advisories/2007/0691
• af854a3a-2127-422b-91ae-364da2661108http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
• af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/24264
• af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1017685
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/22662
• af854a3a-2127-422b-91ae-364da2661108http://www.trendmicro.com/download/product.asp?productid=20
• af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2007/0691