Secunia

Some vulnerabilities have been reported in Trend Micro ServerProtect, which can be exploited by malicious people to compromise a vulnerable system.

1) A boundary error within the EarthAgent.exe service can be exploited to cause a stack-based buffer overflow via a specially crafted RPC request to the said service (default port 3628/TCP).

2) A boundary error within the "CAgRpcClient::CreateBinding()" function in AgRpcCln.dll can be exploited to cause a stack-based buffer overflow via a specially crafted RPC request to the SpntSvc.exe service (default port 5168/TCP).

3) A boundary error in the ENG_SetRealTimeScanConfigInfo function within eng50.dll can be exploited to cause a buffer overflow.

4) A boundary error within stcommon.dll when handling RPC calls to RPCFN_ActiveRollback can be exploited to cause a buffer overflow.

5) A boundary error within AgRpcCln.dll can be exploited to cause a buffer overflow.

Successful exploitation of the vulnerabilities allows execution of arbitrary code.

The vulnerabilities are reported in the following versions:
* ServerProtect for Windows 5.58
* ServerProtect for EMC 5.58
* ServerProtect for Network Appliance Filer 5.61
* ServerProtect for Network Appliance Filer 5.62

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
1)-2) Discovered by Eric Detoisien and reported via ZDI.
3)-4) Pedram Amini, TippingPoint Security Research Team
5) Reported by the vendor.

Changelog
Further details available in Customer Area

Original Advisory
Trend Micro:
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034757
http://esupport.trendmicro.com/support/viewxml.do?ContentID=EN-1034290
http://www.trendmicro.com/download_beta/product.asp?productid=17
http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch2_readme.txt
http://www.trendmicro.com/ftp/documentation/readme/spnt_558_win_en_securitypatch3_readme.txt

ZDI:
http://www.zerodayinitiative.com/advisories/ZDI-07-024.html
http://www.zerodayinitiative.com/advisories/ZDI-07-025.html

TippingPoint:
http://www.tippingpoint.com/security/advisories/TSRT-07-01.html
http://www.tippingpoint.com/security/advisories/TSRT-07-02.html

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area