CVE-2007-1168
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote...
CVE-2007-1168 is a high vulnerability (CVSS 7.5) in Trend Micro Serverprotect, published February 28, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.52%, the 85th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 2.52%EPSS, 85th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
Exploit likelihood
Affected products
What each source reports
NVD Score used
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
- Record
CVE-2007-1168- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
- Record
CVE-2007-1168- Updated
- 2026-11-02
EUVDEUVD-2007-1165No score
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
- Record
EUVD-2007-1165- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-34jj-j7vv-x8fpNo score
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote...
Trend Micro ServerProtect for Linux (SPLX) 1.25, 1.3, and 2.5 before 20070216 allows remote attackers to access arbitrary web pages and reconfigure the product via HTTP requests with the splx_2376_info cookie to the web interface port (14942/tcp).
- Record
GHSA-34jj-j7vv-x8fp- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
trendmicro.com/download/product.asp?productid=20
vupen.com/english/advisories/2007/0691
securityfocus.com/bid/22662
securitytracker.com/id?1017685
secunia.com/advisories/24264
labs.idefense.com/intelligence/vulnerabilities/display.php?id=477
nvd.nist.gov/vuln/detail/CVE-2007-1168
github.com/advisories/GHSA-34jj-j7vv-x8fp