CVE-2007-1168

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2007-03-02 · updated 2026-06-16

Description

Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).

Affected products

Trend Micro Serverprotect: 1.3, 1.25_2007-02-16, 2.5

References

http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
http://secunia.com/advisories/24264
http://securitytracker.com/id?1017685
http://www.securityfocus.com/bid/22662
http://www.trendmicro.com/download/product.asp?productid=20
http://www.vupen.com/english/advisories/2007/0691
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
http://secunia.com/advisories/24264
http://securitytracker.com/id?1017685
http://www.securityfocus.com/bid/22662
http://www.trendmicro.com/download/product.asp?productid=20
http://www.vupen.com/english/advisories/2007/0691

Get alerted when CVE-2007-1168 or the next vulnerability affects your stack