Advisories Blog | G5 Cyber Security

iDEFENSE Security Advisory 2005-12-14.5

iDEFENSE Security Advisory 12.14.05 – Remote exploitation of a denial of service vulnerability in Trend Micro Inc.’s ServerProtect EarthAgent daemon allow attackers to cause the target process to consume 100% of available CPU resources. The problem specifically exists within ServerProtect EarthAgent in the handling of maliciously crafted packets transmitted with the magic value x21x43x65x87 targeting TCP port 5005. A memory leak also occurs with each received exploit packet allowing an attacker to exhaust all available memory resources with repeated attack. iDefense has confirmed the existence of this vulnerability in Trend Micro ServerProtect for Windows Management Console 5.58 running with Trend Micro Control Manager 2.5/3.0 and Trend Micro Damage Cleanup Server 1.1. It is suspected that earlier versions and versions for other platforms are vulnerable as well.

 

You can download this advisory from the following link: https://packetstormsecurity.com/files/download/42311/12.14.05-5.txt

Source: https://packetstormsecurity.com/files/42311/iDEFENSE-Security-Advisory-2005-12-14.5.html

Exit mobile version