Описание
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates.
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2017-9034
- https://success.trendmicro.com/solution/1117411
- https://www.coresecurity.com/advisories/trend-micro-serverprotect-multiple-vulnerabilities
- http://packetstormsecurity.com/files/142645/Trend-Micro-ServerProtect-Disclosure-CSRF-XSS.html
- http://seclists.org/fulldisclosure/2017/May/91
- http://www.securitytracker.com/id/1038548
Связанные уязвимости
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates.
Уязвимость средства защиты серверов и систем хранения ServerProtect, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю выполнить произвольный код с привилегиями root или изменить произвольные файлы