PT-2017-11968

CVE-2017-11382

·

Published

2017-07-31

·

Updated

2019-10-03

Description by

CVSS 3.1
7.5
High
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
Name of the Vulnerable Software and Affected Versions Trend Micro Deep Discovery Email Inspector version 2.5.1
Description The issue allows remote attackers to delete arbitrary files on vulnerable installations, thus disabling the service. This can be exploited to cause a Denial of Service.
Recommendations For version 2.5.1, consider restricting access to the kdump setting to minimize the risk of exploitation until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Related identifiers
ZDI-17-503
Found an issue in the description? Have something to add? Feel free to write us 👾