CVE-2007-2508

Multiple stack-based buffer overflows in Trend Micro ServerProtect 5.58 before Security Patch 2 Build 1174 allow remote attackers to execute arbitrary code via crafted data to (1) TCP port 5168, which triggers an overflow in the CAgRpcClient::CreateBinding function in the AgRpcCln.dll library in SpntSvc.exe; or (2) TCP port 3628, which triggers an overflow in EarthAgent.exe. NOTE: both issues are reachable via TmRpcSrv.dll.

• CWE-119

• http://osvdb.org/35789
• http://osvdb.org/35790
• http://secunia.com/advisories/25186Patch, Vendor Advisory
• http://securitytracker.com/id?1018010Patch
• http://www.kb.cert.org/vuls/id/488424US Government Resource
• http://www.kb.cert.org/vuls/id/515616US Government Resource
• http://www.securityfocus.com/archive/1/467932/100/0/threaded
• http://www.securityfocus.com/archive/1/467933/100/0/threaded
• http://www.securityfocus.com/bid/23866Exploit
• http://www.securityfocus.com/bid/23868
• http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txtPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1689Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-024.htmlVendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-025.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34162
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34163
• http://osvdb.org/35789
• http://osvdb.org/35790
• http://secunia.com/advisories/25186Patch, Vendor Advisory
• http://securitytracker.com/id?1018010Patch
• http://www.kb.cert.org/vuls/id/488424US Government Resource
• http://www.kb.cert.org/vuls/id/515616US Government Resource
• http://www.securityfocus.com/archive/1/467932/100/0/threaded
• http://www.securityfocus.com/archive/1/467933/100/0/threaded
• http://www.securityfocus.com/bid/23866Exploit
• http://www.securityfocus.com/bid/23868
• http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txtPatch, Vendor Advisory
• http://www.vupen.com/english/advisories/2007/1689Vendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-024.htmlVendor Advisory
• http://www.zerodayinitiative.com/advisories/ZDI-07-025.htmlVendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34162
• https://exchange.xforce.ibmcloud.com/vulnerabilities/34163

Published

May 8, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-2502Unspecified vulnerability in HP ProCurve 9300m Series switch…
• CVE-2007-2503Directory traversal vulnerability in turbulence.php in PHP T…
• CVE-2007-2504PHP remote file inclusion vulnerability in user/turbulence.p…
• CVE-2007-2505Stack-based buffer overflow in InterVations MailCOPA 8.01 20…
• CVE-2007-2506WebSpeed 3.x in OpenEdge 10.x in Progress Software Progress …
• CVE-2007-2507Directory traversal vulnerability in includes/download.php i…
• CVE-2007-2509CRLF injection vulnerability in the ftp_putcmd function in P…
• CVE-2007-2510Buffer overflow in the make_http_soap_request function in PH…
• CVE-2007-2511Buffer overflow in the user_filter_factory_create function i…
• CVE-2007-2512Alcatel-Lucent IP-Touch Telephone running OmniPCX Enterprise…
• CVE-2007-2513Novell GroupWise 7 before SP2 20070524, and GroupWise 6 befo…
• CVE-2007-2514Stack-based buffer overflow in XferWan.exe as used in multip…