Trend Micro ServerProtect EarthAgent Daemon Denial of Service Vulnerability

Bugtraq ID:	15868
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-1928
Remote:	Yes
Local:	No
Published:	Dec 14 2005 12:00AM
Updated:	Dec 14 2005 12:00AM
Credit:	Discovered by Pedram Amini.
Vulnerable:	Trend Micro ServerProtect 5.5.8
Not Vulnerable:

Trend Micro ServerProtect EarthAgent Daemon Denial of Service Vulnerability

Trend Micro ServerProtect is prone to a remote denial of service vulnerability when the EarthAgent Daemon processes a malicious packet. This causes the process to consume a large amount of CPU and memory resources, potentially causing the underlying operating system to fail.

This issue affects Trend Micro ServerProtect version 5.58, however, earlier versions may also be affected.

Trend Micro ServerProtect EarthAgent Daemon Denial of Service Vulnerability

An exploit is not required.

Trend Micro ServerProtect EarthAgent Daemon Denial of Service Vulnerability

Solution:
Trend Micro has released a fix. Please contact the vendor to obtain the file SPNT5.58_HotfixB1137.zip.

Trend Micro ServerProtect EarthAgent Daemon Denial of Service Vulnerability

References:

• [Hot Fix Information] ServerProtect for Windows (SPNT) and Netware (SPNW) 5.58 H (Trend Micro)
  
• ServerProtect for Microsoft Windows/Novell NetWare (Trend Micro)
  
• iDefense Security Advisory 12.14.05: Trend Micro ServerProtect EarthAgent Remote ("[email protected]" )