{"api_version":"1","generated_at":"2026-07-23T06:08:29+00:00","cve":"CVE-2005-1929","urls":{"html":"https://cve.report/CVE-2005-1929","api":"https://cve.report/api/cve/CVE-2005-1929.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-1929","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-1929"},"summary":{"title":"CVE-2005-1929","description":"Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via \"wrapped\" length values in Chunked transfer requests.  NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load.  As such, this might not be a vulnerability in Trend Micro's product.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-12-14 21:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["CWE-119","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"http://www.securityfocus.com/bid/15866","name":"http://www.securityfocus.com/bid/15866","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Trend Micro ServerProtect Relay Heap Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://www.securityfocus.com/bid/15865","name":"http://www.securityfocus.com/bid/15865","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Trend Micro ServerProtect ISANVWRequest Heap Overflow Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039972.html","name":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039972.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[Full-disclosure] iDefense Security Advisory 12.14.05: Trend\n\tMicro ServerProtect relay.dll Chunked Overflow Vulnerability","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.idefense.com/application/poi/display?id=353&type=vulnerabilities","name":"http://www.idefense.com/application/poi/display?id=353&type=vulnerabilities","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Accenture | Let there be change","mime":"text/html","httpstatus":"200","archivestatus":"404"},{"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039978.html","name":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039978.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"[Full-disclosure] iDefense Security Advisory 12.14.05: Trend\n\tMicro ServerProtect relay.dll Chunked Overflow Vulnerability","mime":"text/html","httpstatus":"404","archivestatus":"200"},{"url":"http://www.vupen.com/english/advisories/2005/2907","name":"http://www.vupen.com/english/advisories/2005/2907","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Webmail : Solution de messagerie professionnelle - OVHcloud- OVH","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/18038","name":"http://secunia.com/advisories/18038","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - Trend Micro ServerProtect Multiple Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://securityreason.com/securityalert/256","name":"http://securityreason.com/securityalert/256","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/21772","name":"http://www.osvdb.org/21772","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securitytracker.com/id?1015358","name":"http://securitytracker.com/id?1015358","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Trend Micro ServerProtect Buffer Overflows and Other Bugs Permit Remote Code Execution, Denial of Service, and File Disclosure - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.osvdb.org/21771","name":"http://www.osvdb.org/21771","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/257","name":"http://securityreason.com/securityalert/257","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow - CXSecurity.com","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-1929","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-1929","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"1929","vulnerable":"1","versionEndIncluding":"5.58","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"trend_micro","cpe5":"serverprotect","cpe6":"*","cpe7":"*","cpe8":"emc","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T22:06:57.662Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"18038","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/18038"},{"name":"257","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/257"},{"name":"20051214 Re: iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039978.html"},{"name":"1015358","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1015358"},{"name":"20051214 Re: iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039972.html"},{"name":"21772","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/21772"},{"name":"21771","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/21771"},{"name":"20051214 Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow","tags":["third-party-advisory","x_refsource_IDEFENSE","x_transferred"],"url":"http://www.idefense.com/application/poi/display?id=353&type=vulnerabilities"},{"name":"256","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/256"},{"name":"15865","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15865"},{"name":"15866","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/15866"},{"name":"ADV-2005-2907","tags":["vdb-entry","x_refsource_VUPEN","x_transferred"],"url":"http://www.vupen.com/english/advisories/2005/2907"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2005-12-14T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via \"wrapped\" length values in Chunked transfer requests.  NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load.  As such, this might not be a vulnerability in Trend Micro's product."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2005-12-20T10:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"18038","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/18038"},{"name":"257","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/257"},{"name":"20051214 Re: iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039978.html"},{"name":"1015358","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1015358"},{"name":"20051214 Re: iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039972.html"},{"name":"21772","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/21772"},{"name":"21771","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/21771"},{"name":"20051214 Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow","tags":["third-party-advisory","x_refsource_IDEFENSE"],"url":"http://www.idefense.com/application/poi/display?id=353&type=vulnerabilities"},{"name":"256","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/256"},{"name":"15865","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15865"},{"name":"15866","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/15866"},{"name":"ADV-2005-2907","tags":["vdb-entry","x_refsource_VUPEN"],"url":"http://www.vupen.com/english/advisories/2005/2907"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-1929","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via \"wrapped\" length values in Chunked transfer requests.  NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load.  As such, this might not be a vulnerability in Trend Micro's product."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"18038","refsource":"SECUNIA","url":"http://secunia.com/advisories/18038"},{"name":"257","refsource":"SREASON","url":"http://securityreason.com/securityalert/257"},{"name":"20051214 Re: iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability","refsource":"FULLDISC","url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039978.html"},{"name":"1015358","refsource":"SECTRACK","url":"http://securitytracker.com/id?1015358"},{"name":"20051214 Re: iDefense Security Advisory 12.14.05: Trend Micro ServerProtect relay.dll Chunked Overflow Vulnerability","refsource":"FULLDISC","url":"http://lists.grok.org.uk/pipermail/full-disclosure/2005-December/039972.html"},{"name":"21772","refsource":"OSVDB","url":"http://www.osvdb.org/21772"},{"name":"21771","refsource":"OSVDB","url":"http://www.osvdb.org/21771"},{"name":"20051214 Trend Micro ServerProtect isaNVWRequest.dll Chunked Overflow","refsource":"IDEFENSE","url":"http://www.idefense.com/application/poi/display?id=353&type=vulnerabilities"},{"name":"256","refsource":"SREASON","url":"http://securityreason.com/securityalert/256"},{"name":"15865","refsource":"BID","url":"http://www.securityfocus.com/bid/15865"},{"name":"15866","refsource":"BID","url":"http://www.securityfocus.com/bid/15866"},{"name":"ADV-2005-2907","refsource":"VUPEN","url":"http://www.vupen.com/english/advisories/2005/2907"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-1929","datePublished":"2005-12-14T21:00:00.000Z","dateReserved":"2005-06-08T00:00:00.000Z","dateUpdated":"2024-08-07T22:06:57.662Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-12-14 21:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["CWE-119","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":true,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:trend_micro:serverprotect:*:*:emc:*:*:*:*:*","versionEndIncluding":"5.58","matchCriteriaId":"37239A26-21E5-4A7D-BB3B-219954F72751"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"1929","Ordinal":"1","Title":"CVE-2005-1929","CVE":"CVE-2005-1929","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"1929","Ordinal":"1","NoteData":"Multiple heap-based buffer overflows in (1) isaNVWRequest.dll and (2) relay.dll in Trend Micro ServerProtect Management Console 5.58 and earlier, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, allow remote attackers to execute arbitrary code via \"wrapped\" length values in Chunked transfer requests.  NOTE: the original report suggests that the relay.dll issue is related to a problem in which a Microsoft Foundation Classes (MFC) static library returns invalid values under heavy load.  As such, this might not be a vulnerability in Trend Micro's product.","Type":"Description","Title":"CVE-2005-1929"},{"CveYear":"2005","CveId":"1929","Ordinal":"2","NoteData":"2005-12-14","Type":"Other","Title":"Published"},{"CveYear":"2005","CveId":"1929","Ordinal":"3","NoteData":"2005-12-20","Type":"Other","Title":"Modified"}]}}}