Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
| Software | From | Fixed in |
|---|---|---|
| trend_micro / serverprotect | 2.5 | 2.5.x |
| trend_micro / serverprotect | 1.25_2007-02-16 | 1.25_2007-02-16.x |
| trend_micro / serverprotect | 1.3 | 1.3.x |