CVE-2005-1930

high

Description

Directory traversal vulnerability in the Crystal Report component (rptserver.asp) in Trend Micro ServerProtect Management Console 5.58, as used in Control Manager 2.5 and 3.0 and Damage Cleanup Server 1.1, and possibly earlier versions, allows remote attackers to read arbitrary files via the IMAGE parameter.

References

http://www.vupen.com/english/advisories/2005/2907

http://www.securityfocus.com/bid/15867

http://www.osvdb.org/21770

http://www.idefense.com/application/poi/display?id=352&type=vulnerabilities

http://securitytracker.com/id?1015358

http://securityreason.com/securityalert/258

http://secunia.com/advisories/18038

Details

Source: Mitre, NVD

Published: 2005-12-14

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Severity: High

EPSS

EPSS: 0.00873