Trend Micro ServerProtect for Linux 3.0 vulnerabilities
4 known CVE vulnerabilities in Trend Micro ServerProtect for Linux 3.0, translated and rated.
- CVE-2017-9036High
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows local users to gain privileges by leveraging an unrestricted quarantine directory.
- CVE-2017-9035High
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to eavesdrop and tamper with updates by leveraging unencrypted communications with update servers.
- CVE-2017-9033High
CSRF vulnerability in Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows remote attackers to hijack user authentication for requests to start an update from an arbitrary source via a crafted request.
- CVE-2017-9034Critical
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges due to failure to validate software updates.