CVE-2005-1930

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-12-14 · updated 2026-06-16

Description

Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE parameter.

Affected products

Trend Micro Serverprotect: 5.58

References

http://secunia.com/advisories/18038
http://securityreason.com/securityalert/258
http://securitytracker.com/id?1015358
http://www.idefense.com/application/poi/display?id=352&type=vulnerabilities
http://www.osvdb.org/21770
http://www.securityfocus.com/bid/15867
http://www.vupen.com/english/advisories/2005/2907
http://secunia.com/advisories/18038
http://securityreason.com/securityalert/258
http://securitytracker.com/id?1015358
http://www.idefense.com/application/poi/display?id=352&type=vulnerabilities
http://www.osvdb.org/21770

Get alerted when CVE-2005-1930 or the next vulnerability affects your stack