#VU6722 Remote code execution in ServerProtect for Linux - CVE-2017-9035

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU6722

#VU6722 Remote code execution in ServerProtect for Linux - CVE-2017-9035

Published: May 25, 2017


Vulnerability identifier: #VU6722
Vulnerability risk: High
CVSSv4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:U/U:Amber
CVE-ID: CVE-2017-9035
CWE-ID: CWE-20
Exploitation vector: Remote access
Exploit availability: No public exploit available
Vulnerable software:
ServerProtect for Linux
Software vendor:
Trend Micro

Description

The vulnerability allows a remote authenticated attacker to execute arbitrary code on the target system.

The vulnerability exists due to insecure update method via HTTP without certificate validation. A remote authenticated attacker can modify data in transit to cause the target system to execute arbitrary code.

Successful exploitation of this vulnerability may result in system compromise.


Remediation

Update to version 3.0 CP 1531.


External links