cbcvebase.
CVE-2007-6507
published 2007-12-20

CVE-2007-6507: SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the…

PriorityP260critical10CVSS 2.0
AVNACLAuNCCICAC
EXPLOIT
EPSS
36.65%
98.3th percentile
SpntSvc.exe daemon in Trend Micro ServerProtect 5.58 for Windows, before Security Patch 4, exposes unspecified dangerous sub-functions from StRpcSrv.dll in the DCE/RPC interface, which allows remote attackers to obtain "full file system access" and execute arbitrary code.

Affected

1 ranges
VendorProductVersion rangeFixed in
trend_microserverprotect——

Detection & IOCsextracted from sources · hover to see the quote

processSpntSvc.exe↗
filenameStRpcSrv.dll↗
  • →Monitor for remote DCE/RPC calls targeting SpntSvc.exe (Trend Micro ServerProtect) that invoke sub-functions exported from StRpcSrv.dll, which can grant full file system access to unauthenticated remote attackers. ↗
  • →The Metasploit auxiliary module 'auxiliary/admin/serverprotect/file' can be used to validate exposure; detect its use or similar RPC probing activity against the ServerProtect Windows Server RPC service. ↗
  • ·Vulnerability only affects Trend Micro ServerProtect 5.58 for Windows prior to Security Patch 4; patched installations are not affected. ↗
CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.