CVE-2005-1928
Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU…
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.66%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak.
- CVSS 2.0
- 7.8 HIGHAV:N/AC:L/Au:N/C:N/I:N/A:C
- EPSS
- 3.66% probability · 89th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-399
- Affected
- trend micro/serverprotect earthagent
- Source
- cve@mitre.org
References
- http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254
- http://secunia.com/advisories/18038Vendor Advisory
- http://securityreason.com/securityalert/259
- http://securitytracker.com/id?1015358
- http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt
- http://www.idefense.com/application/poi/display?id=356&type=vulnerabilitiesVendor Advisory
- http://www.osvdb.org/21773
- http://www.securityfocus.com/bid/15868
- http://www.vupen.com/english/advisories/2005/2907Vendor Advisory
- http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254
- http://secunia.com/advisories/18038Vendor Advisory
- http://securityreason.com/securityalert/259
- http://securitytracker.com/id?1015358
- http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt
- http://www.idefense.com/application/poi/display?id=356&type=vulnerabilitiesVendor Advisory
- http://www.osvdb.org/21773
- http://www.securityfocus.com/bid/15868
- http://www.vupen.com/english/advisories/2005/2907Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.