CVE-2005-1928

high

Description

Trend Micro ServerProtect EarthAgent for Windows Management Console 5.58 and possibly earlier versions, when running with Trend Micro Control Manager 2.5 and 3.0, and Damage Cleanup Server 1.1, allows remote attackers to cause a denial of service (CPU consumption) via a flood of crafted packets with a certain "magic value" to port 5005, which also leads to a memory leak.

References

http://www.vupen.com/english/advisories/2005/2907

http://www.securityfocus.com/bid/15868

http://www.osvdb.org/21773

http://www.idefense.com/application/poi/display?id=356&type=vulnerabilities

http://solutionfile.trendmicro.com/SolutionFile/25254/en/Hotfix_Readme_SPNT5_58_B1137.txt

http://securitytracker.com/id?1015358

http://securityreason.com/securityalert/259

http://secunia.com/advisories/18038

http://kb.trendmicro.com/solutions/search/main/search/solutionDetail.asp?solutionID=25254

Details

Source: Mitre, NVD

Published: 2005-12-14

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.8

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:N/A:C

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Severity: High

EPSS

EPSS: 0.04507