CVE-2007-6507

SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code.

CVSS v2.0

10.0 HIGHAV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

36.65% chance of exploitation in the next 30 days, 98th percentile

Published

2007-12-20

Updated

2024-08-07

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/serverprotect/file.rb

References

• CVE Record
• NVD entry

Related

• CVE-2007-6506
• CVE-2007-6508
• CVE-2007-6504
• CVE-2007-6509
• CVE-2007-6503
• CVE-2007-6510