CVE-2017-9036
HighSummary
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory.
Risk Assessment
The organization may be exposed to unauthorized access to the system, potentially leading to privilege escalation and security breaches.
Recommendation
It is recommended to update Trend Micro ServerProtect to the latest version and restrict access to the quarantine directory.
Other vulnerabilities in Trend Micro ServerProtect for Linux 3.0
See all- CVE-2017-9035High
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
- CVE-2017-9033High
CSRF vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack user authentication for requests to start an update from an arbitrary source via a crafted request.
- CVE-2017-9034Critical
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges due to failure to validate software updates.
Original NVD description (English source)
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory.