Vulnerability Details CVE-2005-1928
Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.045
EPSS Ranking 88.6%
CVSS Severity
CVSS v2 Score 7.8
References
- http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254
- http://secunia.com/advisories/18038
- http://securityreason.com/securityalert/259
- http://securitytracker.com/id?1015358
- http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt
- http://www.idefense.com/application/poi/display?id=356&type=vulnerabilities
- http://www.osvdb.org/21773
- http://www.securityfocus.com/bid/15868
- http://www.vupen.com/english/advisories/2005/2907
- http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254
- http://secunia.com/advisories/18038
- http://securityreason.com/securityalert/259
- http://securitytracker.com/id?1015358
- http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt
- http://www.idefense.com/application/poi/display?id=356&type=vulnerabilities
- http://www.osvdb.org/21773
- http://www.securityfocus.com/bid/15868
- http://www.vupen.com/english/advisories/2005/2907
Products affected by CVE-2005-1928
-
cpe:2.3:a:trend_micro:serverprotect_earthagent:5.58