CVE-2005-1928
Last modified
CVE-2005-1928 is a vulnerability of currently unknown severity. Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak.. EPSS estimates a 3.66% chance of exploitation in the next 30 days.
Description
Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Trend Micro | Serverprotect Earthagent | 5.58 |
References
- http://secunia.com/advisories/18038Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2907Vendor Advisory
- http://secunia.com/advisories/18038Vendor Advisory
- http://www.vupen.com/english/advisories/2005/2907Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-1928?
How severe is CVE-2005-1928?
How do I fix CVE-2005-1928?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-1920The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x th…7.5
- CVE-2005-1921Eval injection vulnerability in PEAR XML_RPC 1.3.0 and earli…
- CVE-2005-1922The MS-Expand file handling in Clam AntiVirus (ClamAV) befor…
- CVE-2005-1923The ENSURE_BITS macro in mszipd.c for Clam AntiVirus (ClamAV…
- CVE-2005-1924The G/PGP (GPG) Plugin 2.1 and earlier for Squirrelmail allo…
- CVE-2005-1925Multiple directory traversal vulnerabilities in Tikiwiki bef…
- CVE-2005-1929Multiple heap-based buffer overflows in (1) isaNVWRequest.dl…
- CVE-2005-1930Directory traversal vulnerability in the Crystal Report comp…
- CVE-2005-1931GoodTech SMTP Server 5.14 allows remote attackers to cause a…
- CVE-2005-1932Lpanel 1.59 and earlier, and other versions before 1.597, al…
- CVE-2005-1933Dashboard in Apple Mac OS X Tiger 10.4 allows attackers to e…
- CVE-2005-1934Gaim before 1.3.1 allows remote attackers to cause a denial …
Are you affected by CVE-2005-1928?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
